Hello,
> Added security? Only that extra security provided by not having your network's
> addresses known to the 'net. The NAT provides no extra protection from someone
> "outside" who knows or deduces (from unparsed E-mail headers, perhaps) your
> actual addresses. It also provides no activity logging for later audit, at
> least not as part of the NAT function.
This is not quite true. NAT can protect you from outisde cause it only
allows you to make connections from the inside to the outside. If you use
Linux Masquerading for example there is no way to reach an listening port of
the internal network from outside. This is sort of statefull connection
filtering.
Greetings
Bernd
--
(OO) -- Bernd_Eckenfels @
Wittumstrasse13 .
76646Bruchsal .
de --
( .. ) ecki @
{inka .
de,linux.de,debian.org} http://home.pages.de/~eckes/
o--o *plush* 2048/93600EFD eckes @
irc +4972573817 BE5-RIPE
(O____O) If privacy is outlawed only Outlaws have privacy
References:
|
|
