I've been asked for my opinion about a network that has all its equipment on a public IP range (ie no NAT) whether they should go for adding NAT to the mix to help security (there's a pretty good firewall). IMHO NAT was useful about a decade ago as a security option, but nowadays it adds nothing much apart from unneeded complications. I'd be interested in second opinions. . . .
NAT is a hack. In a way, I guess so are Firewalls... but I digress. There's no good reason to NAT for "security" reasons. If you have a correctly configured firewall, that is quite sufficient.
When NZ at least become IPV6, NAT will go i history as rudimentary technology. As for now you can use it if you want to free some IP's. It's improve security a bit (by blocking by default income connections) by price of complexity (port forwarding, port-triggering, etc). But any good firewall does this anyway, so why bother?
gjm: 1) Find out that they own a /8 address space 2) Put NAT in and sell public IP range 3). 4) Profit $$$
Selling is an option, but I understand that you can't trade in them (except if you're called Microsoft). Do you know of anyone in the nz space that has successfully sold/purchased blocks, and the amount?
Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly
to your computer or smartphone by using a feed reader.
Trusted
Vocus
