Security Basics mailing list archives

Re: Re: NAT external/Public IP


From: proneetb () redback com
Date: 25 Oct 2007 17:11:11 -0000

Actually, NAT on the address provides an additional layer of security. By allowing only particular IP address and 
port/application combinations to be natted, the user could effectively create a set of rules which would behave like a 
firewall. Example: If the only traffic which is natted is the inbound traffic on port 80 to your web server, then 
traffic on any other port inbound/outbound would effectively be dropped by a NAT device as it would not
know how to translate the traffic. 


Current thread: