[134943] in North American Network Operators' Group
Re: Is NAT can provide some kind of protection?
daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Wed Jan 12 23:47:52 2011
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: "nanog@nanog.org list" <nanog@nanog.org>
Date: Thu, 13 Jan 2011 04:47:05 +0000
In-Reply-To: <BLU0-SMTP171FA5EE6F76A7B0191101BBBF10@phx.gbl>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Mar 21, 2007, at 5:41 AM, Tarig Ahmed wrote:
> Security guy told me is not correct to assign public ip to a server, it s=
hould have private ip for security reasons.
He's wrong.
> Is it true that NAT can provide more security?
No, it makes things worse from an availability perspective. Servers should=
never be NATted or placed behind a stateful firewall.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>
Sell your computer and buy a guitar.
