[170024] in North American Network Operators' Group
Re: misunderstanding scale (was: Ipv4 end, its fake.)
daemon@ATHENA.MIT.EDU (Mark Tinka)
Sun Mar 23 14:48:34 2014
From: Mark Tinka <mark.tinka@seacom.mu>
To: tagno25@gmail.com
Date: Sun, 23 Mar 2014 20:48:12 +0200
In-Reply-To: <CABidiT+k2sKKvE4a4z0wWD95=jJz1pN4Vt58HKCZ00ZQmVwgqA@mail.gmail.com>
Cc: John Levine <johnl@iecc.com>, nanog@nanog.org
Reply-To: mark.tinka@seacom.mu
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--nextPart1490851.5gJ78eIook
Content-Type: Text/Plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
On Sunday, March 23, 2014 08:27:57 PM Philip Dorr wrote:
=20
> That is what a firewall is for. Drop new inbound
> connections, allow related, and allow outbound. Then
> you allow specific IP/ports to have inbound traffic.=20
> You may also only allow outbound traffic for specific
> ports, or from your proxy.
How many enterprise installations do you know that favour=20
firewall use for NAT rather than actual firewalling?
Mark.
--nextPart1490851.5gJ78eIook
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)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=Y0+/
-----END PGP SIGNATURE-----
--nextPart1490851.5gJ78eIook--