2 ms·
That is not true. It is problematic in general but in some limited cases it is possible. For example, neighbors on WAN network could just send packets with dst
by zajio1am 5y ago
That is not true. It is problematic in general but in some limited cases it is possible. For example, neighbors on WAN network could just send packets with dst address from your private LAN range directly to the WAN port of your router.
If the router is configured as both NAT (SNAT) and firewall, it will drop such packet as not associated with any existing flow, but if it is just configured as SNAT, then such packet would be just forwarded inside unmodified.
- sneak 5y agoA router that accepts inbound packets with 1918 dsts on the wan port is a broken router.
- icedchai 5y agoNot necessarily. Routers can be used internally. Even consumer level routers are used in weird dual NAT situations. (Also there is no requirement that you use RFC-1918 addresses behind NAT.)