3 ms·
If a device on the network is compromised, how is a private IP going to save you? Private IPs can be reached from within the network.
by eurleif 3y ago
If a device on the network is compromised, how is a private IP going to save you? Private IPs can be reached from within the network.
- DarkmSparks 3y agoit doesnt "save you". but on a private network a compromised device can only make outgoing connections. public facing devices can be administered by incoming connections, thats a whole other level of complexity, potentially for every device.
- ehPReth 3y agoset router to an allowlist configuration... and you're done. it's your "NAT" security but without terribleness. some (consumer/smb) routers even come this way out of the box to prevent exactly what you mention
- DarkmSparks 3y agoadd a software router to the network that hands out public ips to all the devices on the network. or better, just accidentally switch a cable over from the router to the routers switch, see if anyone notices their private ips all became public ones.