[170024] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: misunderstanding scale (was: Ipv4 end, its fake.)

daemon@ATHENA.MIT.EDU (Mark Tinka)
Sun Mar 23 14:48:34 2014

From: Mark Tinka <mark.tinka@seacom.mu>
To: tagno25@gmail.com
Date: Sun, 23 Mar 2014 20:48:12 +0200
In-Reply-To: <CABidiT+k2sKKvE4a4z0wWD95=jJz1pN4Vt58HKCZ00ZQmVwgqA@mail.gmail.com>
Cc: John Levine <johnl@iecc.com>, nanog@nanog.org
Reply-To: mark.tinka@seacom.mu
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

--nextPart1490851.5gJ78eIook
Content-Type: Text/Plain;
  charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

On Sunday, March 23, 2014 08:27:57 PM Philip Dorr wrote:
=20
> That is what a firewall is for.  Drop new inbound
> connections, allow related, and allow outbound.  Then
> you allow specific IP/ports to have inbound traffic.=20
> You may also only allow outbound traffic for specific
> ports, or from your proxy.

How many enterprise installations do you know that favour=20
firewall use for NAT rather than actual firewalling?

Mark.

--nextPart1490851.5gJ78eIook
Content-Type: application/pgp-signature; name=signature.asc 
Content-Description: This is a digitally signed message part.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
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=Y0+/
-----END PGP SIGNATURE-----

--nextPart1490851.5gJ78eIook--


home help back first fref pref prev next nref lref last post