nanog mailing list archives

Re: Is NAT can provide some kind of protection?


From: "Dobbins, Roland" <rdobbins () arbor net>
Date: Thu, 13 Jan 2011 04:47:05 +0000


On Mar 21, 2007, at 5:41 AM, Tarig Ahmed wrote:

Security guy told me is not correct to assign public ip to a server, it should have private ip for security reasons.

He's wrong.

Is it true that NAT can provide more security?


No, it makes things worse from an availability perspective.  Servers should never be NATted or placed behind a stateful 
firewall.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

             Sell your computer and buy a guitar.





Current thread: