nanog mailing list archives
Re: Security gain from NAT
From: Mattias Ahnberg <mattias () ahnberg pp se>
Date: Tue, 05 Jun 2007 12:56:36 +0200
Donald Stahl wrote:
Keep it simple. NAT is a terrible terrible hack- and it's sad that it's become so accepted in the maintsream.
Probably mostly because it WORKS for people, it doesn't require you to be a network specialist. Someone just purchases a NAT gateway to connect to their ADSL/cable connection where they have one dynamic IP allocated by their ISP. They get automatic DHCP by the internal ports on the router and all is set, they can connect many computers to the network. They don't have to understand PAT, NAT or policies. This is certainly part of the problem too, that users don't know a lot about their underlying connectivity and why things work the way it does; but that is another discussion. To get rid of NAT and the advantages it has someone would've needed to design stuff differently to begin with. Allocate larger blocks of IPs to customers with more than one computer at home, or default allocate more. Imagine the bureaucracy around that? -- /ahnberg.
Current thread:
- RE: Security gain from NAT (was: Re: Cool IPv6 Stuff), (continued)
- RE: Security gain from NAT (was: Re: Cool IPv6 Stuff) Edward B. DREGER (Jun 04)
- Re: Security gain from NAT (was: Re: Cool IPv6 Stuff) Perry Lorier (Jun 05)
- Re: Security gain from NAT (was: Re: Cool IPv6 Stuff) James Hess (Jun 05)
- RE: Security gain from NAT (was: Re: Cool IPv6 Stuff) michael.dillon (Jun 05)
- Re: Security gain from NAT (was: Re: Cool IPv6 Stuff) Nathan Ward (Jun 05)
- Re: Security gain from NAT (was: Re: Cool IPv6 Stuff) Sam Stickland (Jun 06)
- Re: Security gain from NAT (was: Re: Cool IPv6 Stuff) Kradorex Xeron (Jun 05)
- Re: Security gain from NAT Leigh Porter (Jun 04)
- Re: Security gain from NAT Donald Stahl (Jun 04)
- Re: Security gain from NAT Dorn Hetzel (Jun 04)
- Re: Security gain from NAT Mattias Ahnberg (Jun 05)
- Re: Security gain from NAT Adrian Chadd (Jun 05)
- Re: Security gain from NAT James R. Cutler (Jun 05)
- Re: Security gain from NAT Matthew Palmer (Jun 04)
- Re: Security gain from NAT Sam Stickland (Jun 04)
- Re: Security gain from NAT Matthew Palmer (Jun 04)
- Re: Security gain from NAT Matthew Kaufman (Jun 04)
- RE: Security gain from NAT (was: Re: Cool IPv6 Stuff) Tony Hain (Jun 04)
- Re: Security gain from NAT (was: Re: Cool IPv6 Stuff) Valdis . Kletnieks (Jun 04)
- Security gain from NAT (was: Re: Cool IPv6 Stuff) Jim Shankland (Jun 04)
- Re: Security gain from NAT (was: Re: Cool IPv6 Stuff) Valdis . Kletnieks (Jun 04)