2 ms·
"NAT as security" can be reframed. Instead of a router coming default with NO access control/firewall, and inbound connections being denied by the technical im
by unethical_ban 4y ago
"NAT as security" can be reframed.
Instead of a router coming default with NO access control/firewall, and inbound connections being denied by the technical impossibility of addressing an inbound Internet packet to a private address, the industry should shift to "default ACL of allow all outbound, allow none inbound" and then have users craft inbound firewall rules as needed.
- mort96 4y ago> and then have users craft inbound firewall rules as needed Try explaining that to non-techies. There's a reason UPnP exists. We would ideally want something like NAT hole punching but more standardized.