Ryan said...
>NAT gives security for two kinds of hosts:
*
1. Public hosts...<snip>..."NAT is not really needed in this case, nor
does it add much security by itself."...<snip>
*
2. Internal hosts...<snip>...stuff about no one-to-one mapping...but
there is a one-to-one mapping to anything that is inside a NAT and is
going to accept inbound connections...like an internal SMTP server for
example. Then there's the fact that once an internal host makes a
connection through a NAT, it can then be tampered with as if there was
no NAT.
*
If someone asked me what security NAT provides, I'd say none at all.
Firewall-1 and PIX offer security, and, they offer NAT. NAT is not a
security product, it may obscure things, but it protects nothing by
itself.
*
Cheers,
Russ
R.C. Consulting, Inc. - NT/Internet Security Consulting
mailto:Russ .
Cooper @
RC .
on .
ca <-- *note the new address*
|
|
