nanog mailing list archives

Re: Is NAT can provide some kind of protection?


From: Jack Bates <jbates () brightok net>
Date: Thu, 13 Jan 2011 09:59:58 -0600

On 1/12/2011 9:33 PM, Owen DeLong wrote:
If you are proxying everything, then, there isn't any actual NAT. There are
inside sessions and outside sessions.


Depends on the proxy mechanism used. In a transparent firewall proxy layout, it generally is still considered NAT. The proxy capabilities of the firewall are additional security measures on top of the NAT (and definitely should be deployed for their higher security value).


Jack


Current thread: