4 ms·
Without active measures to allow it, you can't reach ports on a machine behind NAT. If I accidentally run an SSH server where user 'root' and an empty password
by tgsovlerkhgsel 5y ago
Without active measures to allow it, you can't reach ports on a machine behind NAT.
If I accidentally run an SSH server where user 'root' and an empty password gives you root access, you still won't be able to get in.
Accidentally configuring port forwarding is a lot harder than accidentally disabling an on-host firewall.
- tsimionescu 5y agoYou can just as easily run a firewall as a NAT, in fact most home routers support both. And, just like NAT, by default they don't allow any connections from the outside.
- Dagger2 5y agoThis is not actually true. NAT rewrites the apparent source address of outbound connections, which has no impact on inbound connections -- any inbound connection that worked before you started NATing your outbound connections will continue to work after you start doing so. You need a firewall for security, and NAT doesn't do anything in that regard other than make it harder to understand what's going on.