nanog mailing list archives

Re: misunderstanding scale (was: Ipv4 end, its fake.)


From: Mark Tinka <mark.tinka () seacom mu>
Date: Sun, 23 Mar 2014 20:48:12 +0200

On Sunday, March 23, 2014 08:27:57 PM Philip Dorr wrote:
 
That is what a firewall is for.  Drop new inbound
connections, allow related, and allow outbound.  Then
you allow specific IP/ports to have inbound traffic. 
You may also only allow outbound traffic for specific
ports, or from your proxy.

How many enterprise installations do you know that favour 
firewall use for NAT rather than actual firewalling?

Mark.

Attachment: signature.asc
Description: This is a digitally signed message part.


Current thread: