Re: NAT external/Public IP

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2007-10-24 smarts_buy () yahoo com wrote:
> Would like know is ther any security concern to bring in
> external/public IP with out NAT to inside of the enterprise network.
> Is it any way more secure if we use NAT?

No. NAT is a technology designed to (among other things) *enable*
communication between private and public networks. Firewalling OTOH was
designed to *restrict* communication between networks. Defining
appropriate firewall rules will secure a public IP address just as well
as a private one.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq