Re: Probes on Port 135 and 445 continue

david20_at_alpha2.mdx.ac.uk
Date: 10/12/04 

Date: Tue, 12 Oct 2004 16:06:14 +0000 (UTC)

In article <MPG.1bd5abc3dbfdf6d3989843@news-server.columbus.rr.com>, Leythos <void@nowhere.org> writes:
>In article <ckgfgj$q7d$1@news.mdx.ac.uk>, david20@alpha2.mdx.ac.uk
>says...
>> Unfortunately NAT breaks some applications.
>> I'd pity the ISP support people having to try to explain why to your "clueless"
>> users.
>
>And I would bet that 90% of the clueless home users would never have a
>problem with it - never be impacted by NAT.
>

Trying to explain to 10% of your clueless users would be bad enough.

>> Also in a few years time we should have moved to IPv6 and NAT should no longer
>> be needed for it's real purpose of conserving IP address space.
>
>That's just one reason. I can't imagine anyone wanting to run their
>businesses on public IP's.

Repeat

"
 NAT is NOT a security solution.
 Firewalls are security solutions.
"

What security NAT provides is a side effect which is better achieved via a
proper firewall.

David Webb
Security Team Leader
CCSS
Middlesex University

>
>--
>--
>spamfree999@rrohio.com
>(Remove 999 to reply to me)

Relevant Pages

  • Re: Probes on Port 135 and 445 continue
    ... >> Unfortunately NAT breaks some applications. ... NAT is NOT a security solution. ... proper firewall. ...
    (comp.security.misc)
  • RE: [fw-wiz] Home Environment Cisco
    ... Sometimes I think that GRC, NMap and Nessus are the worst security tools out ... I really wish the NAT proponents would read the RFC where the authors ... great component of a security solution, but it is not alone a solution. ...
    (Firewall-Wizards)
  • Re: Probes on Port 135 and 445 continue
    ... > NAT is NOT a security solution. ... I express this same thing when I hear people stating they own a firewall ... when all they own is a NAT device. ...
    (comp.security.misc)
  • Re: Probes on Port 135 and 445 continue
    ... > NAT is NOT a security solution. ... I express this same thing when I hear people stating they own a firewall ... when all they own is a NAT device. ...
    (comp.security.unix)
  • Re: Probes on Port 135 and 445 continue
    ... >>Unfortunately NAT breaks some applications. ... Honestly, Leythos, the typical user is more saavy than you think. ... I knew how to run FTP servers, web servers, ...
    (comp.security.misc)