[134854] in North American Network Operators' Group
RE: Is NAT can provide some kind of protection?
daemon@ATHENA.MIT.EDU (Nathan Eisenberg)
Wed Jan 12 12:53:15 2011
From: Nathan Eisenberg <nathan@atlasnetworks.us>
To: "nanog@nanog.org list" <nanog@nanog.org>
Date: Wed, 12 Jan 2011 17:52:15 +0000
In-Reply-To: <4D2DE40A.1030406@brightok.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
> And yet blaster type worms are less common now, and I still get the
> occasional reinfection reported where a computer shop installs XP pre-pat=
ch
> with a public IP. A simple stateful firewall or NAT router would stop tha=
t and
> allow them to finish patching the OS. There is always a new attack vector=
.
>=20
> Jack
I'd argue that the above has everything to do with firewalling, and nothing=
to do with NAT.
Slightly OT: It boggles the mind a bit when I find desktop shops -not- usin=
g imaging. I would think most people would prefer not to stare at OS insta=
ll screens - and when you can blast out a fully patched XP image easily in =
sub-10 minutes, the ROI is staggering.
Nathan
