nanog mailing list archives
RE: Is NAT can provide some kind of protection?
From: "George Bonser" <gbonser () seven com>
Date: Wed, 12 Jan 2011 09:21:39 -0800
I'd eat a hat if a vendor didn't implement a PAT equivalent. It's demanded too much. There is money for it, so it will be there. Jack
Yeah, I think you are right. But in really thinking about it, I wonder why. The whole point of PAT was address conservation. You don't need that with v6. All you need to do with v6 is basically have what amounts to a firewall in transparent mode in the line and doesn't let a packet in (except where explicitly configure to) unless it is associated with a packet that went out. PAT makes little sense to me for v6, but I suspect you are correct. In addition, we are putting the "fire suit" on each host in addition to the firewall. Kernel firewall rules on each host for the *nix boxen.
Current thread:
- Re: Is NAT can provide some kind of protection?, (continued)
- Re: Is NAT can provide some kind of protection? Nick Hilliard (Jan 12)
- Re: Is NAT can provide some kind of protection? Tarig Ahmed (Jan 12)
- Re: Is NAT can provide some kind of protection? ML (Jan 12)
- Re: Is NAT can provide some kind of protection? Greg Ihnen (Jan 12)
- Re: Is NAT can provide some kind of protection? LorĂ¡nd Jakab (Jan 12)
- Re: Is NAT can provide some kind of protection? Valdis . Kletnieks (Jan 12)
- Re: Is NAT can provide some kind of protection? Tarig Ahmed (Jan 12)
- RE: Is NAT can provide some kind of protection? George Bonser (Jan 12)
- Re: Is NAT can provide some kind of protection? Fernando Gont (Jan 12)
- RE: Is NAT can provide some kind of protection? George Bonser (Jan 12)
- Re: Is NAT can provide some kind of protection? Jack Bates (Jan 12)
- RE: Is NAT can provide some kind of protection? George Bonser (Jan 12)
- Re: Is NAT can provide some kind of protection? Jack Bates (Jan 12)
- Re: Is NAT can provide some kind of protection? Steven Kurylo (Jan 12)
- Re: Is NAT can provide some kind of protection? Jack Bates (Jan 12)
- Re: Is NAT can provide some kind of protection? Owen DeLong (Jan 12)
- Re: Is NAT can provide some kind of protection? Jack Bates (Jan 12)
- Re: Is NAT can provide some kind of protection? Fernando Gont (Jan 12)
- Re: Is NAT can provide some kind of protection? Nick Hilliard (Jan 12)
- Re: Is NAT can provide some kind of protection? Brian Keefer (Jan 15)
- Re: Is NAT can provide some kind of protection? William Herrin (Jan 15)
- Re: Is NAT can provide some kind of protection? Owen DeLong (Jan 15)
- Re: Is NAT can provide some kind of protection? Brandon Ross (Jan 15)
- Re: Is NAT can provide some kind of protection? Owen DeLong (Jan 15)