nanog mailing list archives

Re: Have they stopped teaching Defense in Depth?

From: William Herrin <bill () herrin us>
Date: Tue, 15 Nov 2011 17:01:09 -0500

On Tue, Nov 15, 2011 at 4:50 PM, Mark Andrews <marka () isc org> wrote:

If you want to use unroutable addresses then use a bastion host /
proxy.  Don't expect to be able to open a TCP socket and have it
connect to something on the outside.  Do it right or don't do it
at all.


Mark,

What is a modern NAT but a bastion host proxy for which application
compatibility has been maximized?

Regards,
Bill Herrin



-- 
William D. Herrin ................ herrin () dirtside com  bill () herrin us
3005 Crane Dr. ...................... Web: <http://bill.herrin.us/>
Falls Church, VA 22042-3004

Current thread:

Re: Arguing against using public IP space, (continued)
- - - Re: Arguing against using public IP space Jeff Kell (Nov 13)
    - Re: Arguing against using public IP space Cameron Byrne (Nov 13)
    - Re: Arguing against using public IP space Robert Bonomi (Nov 13)
    - Re: Arguing against using public IP space Jay Ashworth (Nov 13)
    - Re: Arguing against using public IP space Jeroen van Aart (Nov 14)
    - Re: Arguing against using public IP space William Herrin (Nov 15)
    - Re: Arguing against using public IP space Michael Sinatra (Nov 15)
    - Re: Arguing against using public IP space Owen DeLong (Nov 15)
    - Have they stopped teaching Defense in Depth? Jay Ashworth (Nov 15)
    - Re: Have they stopped teaching Defense in Depth? Mark Andrews (Nov 15)
    - Re: Have they stopped teaching Defense in Depth? William Herrin (Nov 15)
    - Re: Have they stopped teaching Defense in Depth? Owen DeLong (Nov 16)
    - RE: Have they stopped teaching Defense in Depth? Jamie Bowden (Nov 16)
    - Re: Have they stopped teaching Defense in Depth? Owen DeLong (Nov 16)
    - Re: Have they stopped teaching Defense in Depth? William Herrin (Nov 16)
    - Re: Have they stopped teaching Defense in Depth? Owen DeLong (Nov 16)
    - Re: Have they stopped teaching Defense in Depth? Jimmy Hess (Nov 16)
    - Re: Have they stopped teaching Defense in Depth? Jay Ashworth (Nov 16)
    - RE: Have they stopped teaching Defense in Depth? Leigh Porter (Nov 16)
    - Re: Have they stopped teaching Defense in Depth? Valdis . Kletnieks (Nov 16)
    - RE: Have they stopped teaching Defense in Depth? Jamie Bowden (Nov 16)

(Thread continues...)