to NAT or not to NAT

[krjohnson]

what advantage is their from a security point of view of configuring NAT.

[JORGE RODRIGUEZ]

From a security perspective is to hide your internal network private Ip scheme and have a NAT address be expose instead of your internal addresses,other reasons is to be able to communicate to other networks via internet routable addresses, also used for overcoming overlapping networks etc..

Rgds

Jorge

[krjohnson]

I've heard these arguments before but something about them isn't very compelling. If my network is behind a firewall and I'm not using NAT, you still can't get to my internal net. The types of attacks i've seen that can get past firewalls apply to setups with or without NAT.

If I build conduits to internal boxes, whether I run NAT or not the boxes are potentially vulnerable to attacks via the port the conduit allows.

[onlyabhishek007]

hi

the main advantage to configure the nat on the firewall to commutate the private ip on the internet to the publick network.

[jsauviac]

By configuring NAT on a router, you can hide your internal network IP addresses from the outside world.