[e2e] Re: NAT usage at large companies
David P. Reed
dpreed at reed.com
Fri Oct 18 13:20:17 PDT 2002
At 02:27 AM 10/18/2002 -0400, RJ Atkinson wrote:
NAT without some other kind of security (e.g. stateful packet
>inspection firewall) does not provide meaningful security.
I'll take that, and raise you 5 - stateful packet inspection doesn't
provide meaningful security either (if you can figure out how to set it up
correctly in the first place, you gain no benefit unless you carefully
control what is on the "inside" of the firewall. A good first step: no
Microsoft application software (such as Outlook or Word). A good second
step: no Microsoft networking code, such as NetBIOS over TCP. A good third
step: no users.).
More information about the end2end-interest