2 ms·
Not necessarily. What enforces that? You can't rely on your attackers to kindly not send traffic to IPs you don't want them to.
by Dagger2 3y ago
Not necessarily. What enforces that? You can't rely on your attackers to kindly not send traffic to IPs you don't want them to.
- hot_gril 3y agoThe routers. My ISP can't route dst=192.168.1.2 to anywhere, and even if someone managed to splice the packet in between my router and the ISP, my router won't take that dst. That address doesn't exist on the WAN.
- Dagger2 3y agoNo, the routers don't enforce that, and your ISP can route packets with a destination IP of 192.168.1.2, or anything else they like, to you just fine. Your router will happily "take" that destination IP. The only reason it won't is because of a firewall, not because of NAT.