Date: Tue, 28 Mar 2000 17:47:07 -0700 From: Wes Peters <wes@softweyr.com> To: Randy Bush <randy@psg.com> Cc: Kelly Yancey <kbyanc@posi.net>, freebsd-net@FreeBSD.ORG Subject: Re: Security of NAT "firewall" vs. packet filtering firewall. Message-ID: <38E1528B.974251A6@softweyr.com> References: <20000328113534.W330@beastie.localdomain> <Pine.BSF.4.05.10003281436440.3162-100000@kronos.networkrichmond.com> <E12a411-0001UE-00@roam.psg.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Randy Bush wrote:
>
> > NAT will effectively protect the boxes on your network.
>
> how? firewalls protect. nat merely translates addresses.
If you don't "forward" ports from the NAT box to internal boxes, there
is NO path from the outside to the inside. Viola! The internal boxes
are safe from attack.
--
"Where am I, and what am I doing in this handbasket?"
Wes Peters Softweyr LLC
wes@softweyr.com http://softweyr.com/
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?38E1528B.974251A6>