Yes, one more year passed by us and today is our 7th Wedding Anniversary! Not much of a celebration, however I planning to take her and kiddo to a near by Chinese Place for all the Veg-Rolls’ she can eat
She likes ‘em a lot (no clue!).
One of the statements I stumbled upon for more than 5 years now is that NAT provides Security and I do not understand or concur how!
First, NAT was never considered for security in concept, actually there were even holes in NAT if we look at earlier stages of NAT. I found another question in Experts-Exchange today [After a long time I’m dedicating some more time on EE, since I’m more or less becoming a moron doing people management]. So the question was ‘Should I configure nat in my firewall for additional security’. Surprisingly there were more than 5 answers stating different ways it provides security. Guys, I don’t understand and if it is because I don’t know, you’re more than welcome to provide some insight and I’ll be glad you did and learn this.
Say 10.1.1.1 gets natted to 100.1.1.1 onto internet, how does it provide security?
Any attacks targetted to 100.1.1.1 will directly affect 10.1.1.1, unless there is some ‘firewalling’ mechanism involved to stop it.
Or if 10.1.1.1 goes out to internet using 100.1.1.1 and deliberately/unknowingly decides to download a worm, it still gets the machine infected, unless there is some ‘firewalling’ mechanism involved to stop it.
Moreover there are different types of scripts that can locally check what is your local ip configured on your machine (even though it doesn’t provide anything extra that the global/natted ip won’t provide).
So tell me how does NAT provide security. Now identity wise if you look at it, still it is not a great deal! I’m out of other ideas.