3 ms·
if by "heck of a lot less shitfuckery" you mean "makes it a lot easier to exfiltrate all the data on a network" I completely agree, that was pretty much my poin
by DarkmSparks 3y ago
if by "heck of a lot less shitfuckery" you mean "makes it a lot easier to exfiltrate all the data on a network" I completely agree, that was pretty much my point.
- orangeboats 3y agoYou seem to fail to grasp that it is the statefulness of NAT that provides security, not the private/public IP distinction. The same statefulness can be obtained by using... surprise, surprise, a stateful firewall. :-D It is helpful to imagine NAT as a stateful firewall with packet modifying capabilities. Because that's what it is. If your ISP is doing CGNAT, try pinging random 100.64.0.0/10 addresses. Marvel at the number of pongs you can receive. Hell, we even have online threads talking about this, so it can't be just my ISP being incompetent [0]. [0]: https://www.reddit.com/r/networking/comments/1910m9w/discoverable_services_on_cgnat/ https://www.reddit.com/r/networking/comments/1910m9w/discove...