Re: Is NAT can provide some kind of protection?

[Justin Scott <leviathan () darktech org>]

Unfortunately there are some sets of requirements which require this
type of configuration.  The PCI-DSS comes to mind for those who deal
with credit card transactions.

-Justin

On Wednesday, January 12, 2011, Dobbins, Roland <rdobbins () arbor net> wrote:
> On Mar 21, 2007, at 5:41 AM, Tarig Ahmed wrote:
>
> > Security guy told me is not correct to assign public ip to a server, it should have private ip for security reasons.
>
> He's wrong.
>
> > Is it true that NAT can provide more security?
>
>
> No, it makes things worse from an availability perspective.  Servers should never be NATted or placed behind a 
> stateful firewall.
>
> -----------------------------------------------------------------------
> Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>
>
>              Sell your computer and buy a guitar.