Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


omw

omw

3 posts

Wannabe Geek


#143906 30-Apr-2014 23:42
Send private message

I've been asked for my opinion about a network that has all its equipment on a public IP range (ie no NAT) whether they should go for adding NAT to the mix to help security (there's a pretty good firewall). IMHO NAT was useful about a decade ago as a security option, but nowadays it adds nothing much apart from unneeded complications. I'd be interested in second opinions. . . .

Create new topic
ubergeeknz
3344 posts

Uber Geek

Trusted
Vocus

  #1034421 30-Apr-2014 23:47
Send private message

NAT is a hack.  In a way, I guess so are Firewalls... but I digress.  There's no good reason to NAT for "security" reasons.  If you have a correctly configured firewall, that is quite sufficient.



johnr
19282 posts

Uber Geek
Inactive user


  #1034424 1-May-2014 00:00
Send private message

No just have a good firewall

gjm

gjm
808 posts

Ultimate Geek


  #1034473 1-May-2014 08:18
Send private message

1) Find out that they own a /8 address space
2) Put NAT in and sell public IP range
3).
4) Profit $$$


...and if that fails, as people said above there's no reason to NAT.




Do surveys for Beer money (referral link) - Octopus Group 

 

Link for buying beer (not affiliated, just like beer) - Good George




Inphinity
2780 posts

Uber Geek


  #1034520 1-May-2014 09:09
Send private message

Not for security, no, waste of time.

bakewells5856
72 posts

Master Geek


  #1034523 1-May-2014 09:10
Send private message

only reason to use NAT is if you have more devices than you have IP addresses, otherwise its just adding processing overhead for nothing.

Dynamic
3866 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #1034543 1-May-2014 09:29
Send private message

NAT blocks requests from the outside world by default.  Specific pinholes in the NAT allow specific traffic in.

A firewall can easily be mis-configured.

Think Onion.  Layers of protection.




“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

 

Referral links to services I use, really like, and may be rewarded if you sign up:
PocketSmith for budgeting and personal finance management.  A great Kiwi company.


solival
160 posts

Master Geek


  #1034822 1-May-2014 14:03
Send private message

When NZ at least become IPV6, NAT will go i history as rudimentary technology. As for now you can use it if you want to free some IP's. It's improve security a bit (by blocking by default income connections) by price of complexity (port forwarding, port-triggering, etc). But any good firewall does this anyway, so why bother?

 
 
 

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.
hashbrown
463 posts

Ultimate Geek


  #1034869 1-May-2014 15:08
Send private message

johnr: No just have a good firewall


Just have an average firewall and get someone good to configure and maintain it.

I've seen very expensive firewalls rendered useless by muppets who had no clue what they were doing.

omw

omw

3 posts

Wannabe Geek


  #1034924 1-May-2014 15:47
Send private message

gjm: 1) Find out that they own a /8 address space
2) Put NAT in and sell public IP range
3).
4) Profit $$$


Selling is an option, but I understand that you can't trade in them (except if you're called Microsoft). Do you know of anyone in the nz space that has successfully sold/purchased blocks, and the amount?

solival
160 posts

Master Geek


  #1034927 1-May-2014 15:54
Send private message

This could be additional cost for every external ip. Getting rid of expenses is almost a profit :)

Create new topic





News and reviews »

Air New Zealand Starts AI adoption with OpenAI
Posted 24-Jul-2025 16:00


eero Pro 7 Review
Posted 23-Jul-2025 12:07


BeeStation Plus Review
Posted 21-Jul-2025 14:21


eero Unveils New Wi-Fi 7 Products in New Zealand
Posted 21-Jul-2025 00:01


WiZ Introduces HDMI Sync Box and other Light Devices
Posted 20-Jul-2025 17:32


RedShield Enhances DDoS and Bot Attack Protection
Posted 20-Jul-2025 17:26


Seagate Ships 30TB Drives
Posted 17-Jul-2025 11:24


Oclean AirPump A10 Water Flosser Review
Posted 13-Jul-2025 11:05


Samsung Galaxy Z Fold7: Raising the Bar for Smartphones
Posted 10-Jul-2025 02:01


Samsung Galaxy Z Flip7 Brings New Edge-To-Edge FlexWindow
Posted 10-Jul-2025 02:01


Epson Launches New AM-C550Z WorkForce Enterprise printer
Posted 9-Jul-2025 18:22


Samsung Releases Smart Monitor M9
Posted 9-Jul-2025 17:46


Nearly Half of Older Kiwis Still Write their Passwords on Paper
Posted 9-Jul-2025 08:42


D-Link 4G+ Cat6 Wi-Fi 6 DWR-933M Mobile Hotspot Review
Posted 1-Jul-2025 11:34


Oppo A5 Series Launches With New Levels of Durability
Posted 30-Jun-2025 10:15









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.