[134965] in North American Network Operators' Group
Re: Is NAT can provide some kind of protection?
daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Thu Jan 13 11:54:58 2011
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: "nanog@nanog.orglist" <nanog@nanog.org>
Date: Thu, 13 Jan 2011 16:54:43 +0000
In-Reply-To: <4D2F217E.9060502@brightok.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Jan 13, 2011, at 9:59 AM, Jack Bates wrote:
> The proxy capabilities of the firewall are additional security measures o=
n top of the NAT (and definitely should be deployed for their higher securi=
ty value).
Not in front of servers, they shouldn't - because they have a negative secu=
rity value in that context.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>
Sell your computer and buy a guitar.
