4 ms·
NAT can be used in conjunction with IPv6 for security purposes. It is still a thing
by rk06 5y ago
NAT can be used in conjunction with IPv6 for security purposes. It is still a thing
- Dagger2 5y agoIt was never a thing. NAT isn't security.
- tsimionescu 5y agoHow do you think NAT gives you security?
- tgsovlerkhgsel 5y agoWithout active measures to allow it, you can't reach ports on a machine behind NAT. If I accidentally run an SSH server where user 'root' and an empty password gives you root access, you still won't be able to get in. Accidentally configuring port forwarding is a lot harder than accidentally disabling an on-host firewall.
- tsimionescu 5y agoYou can just as easily run a firewall as a NAT, in fact most home routers support both. And, just like NAT, by default they don't allow any connections from the outside.
- Dagger2 5y agoThis is not actually true. NAT rewrites the apparent source address of outbound connections, which has no impact on inbound connections -- any inbound connection that worked before you started NATing your outbound connections will continue to work after you start doing so. You need a firewall for security, and NAT doesn't do anything in that regard other than make it harder to understand what's going on.