Re: Hiding NATs with PF

From: Max Bolingbroke (batterseapower_at_hotmail.com)
Date: 09/28/05


Date: 28 Sep 2005 13:53:26 -0700


Greg Hennessy wrote:
> >Interesting, they don't cite that as a reason. What abuse could be
> >hidden by a NAT that could not be hidden by a single host with firewall
> >enabled?
>
> Nothing routing related, but as Simon also says, if your LAN is compromised
> with a hijacked system......

I see. I would have considered this only as bad as having a single
attached PC (no NAT) comprimised, but they may have their reasons..

Thanks for your help,

Max



Relevant Pages

  • Re: CheckPoint hide nat, static nat
    ... There are cases where NAT can be beneficial. ... LAN where servers are built before being shipped to a production LAN. ... A second reason could be when you have separated networks with static ...
    (comp.security.firewalls)
  • The Rainbow Family of Living Light
    ... realising that we are getting close to the Nat. ... For some reason I feel that I know more than ever that I am going to ... I dont know where the gathering will be but I ...
    (alt.gathering.rainbow)
  • Re: The Rainbow Family of Living Light
    ... Thank God for those things that we can consume to kleen us up for drug ... For some reason I feel that I know more than ever that I am going to ... I dont know where the gathering will be but I ... realised from my PO bonds in time to join with u for this years nat. ...
    (alt.gathering.rainbow)
  • Re: The Rainbow Family of Living Light
    ... Thank God for those things that we can consume to kleen us up for drug ... For some reason I feel that I know more than ever that I am going to ... I dont know where the gathering will be but I ... realised from my PO bonds in time to join with u for this years nat. ...
    (alt.gathering.rainbow)
  • Re: Best practise for ADSL connection?
    ... I saw that you had a another thread about this (NAT vs. non-NAT). ... that's the reason why you are confused... ... >> Javier [SBS MVP] ...
    (microsoft.public.backoffice.smallbiz2000)