Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: NAT external/Public IP

Subject: Re: NAT external/Public IP
Date: Thu, 25 Oct 2007 13:40:31 -0400
I have 6 external ip addys in my prerouting tables sent inside to rcf addresses for services such as smtp imaps http shh.. The question my be better answered buy telling us the services you plan to open on these machines. Prerouting IMHO is not unsecure.

-b

--------------------------------------------------
From: "Jason Alexander" <jalexander@plus.net>
Sent: Thursday, October 25, 2007 11:28 AM
To: <security-basics@securityfocus.com>
Subject: RE: NAT external/Public IP

If its not a security risk then why is it a PCI requirement?

-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com] On Behalf Of Ansgar -59cobalt- Wiechers
Sent: 25 October 2007 15:49
To: security-basics@securityfocus.com
Subject: Re: NAT external/Public IP


On 2007-10-25 crazy frog crazy frog wrote:
On 24 Oct 2007 15:46:21 -0000, smarts_buy@yahoo.com wrote:
Would like know is ther any security concern to bring in
external/public IP with out NAT to inside of the enterprise network.
Is it any way more secure if we use NAT?
[...]
2)If you allow lots of machine to direct access the internet with
external ip they may pose a security risk.

How would that pose a risk that would not exist with NAT'ed machines?

Regards
Ansgar Wiechers
--
"All vulnerabilities deserve a public fear period prior to patches becoming available."
--Jason Coombs on Bugtraq



<Prev in Thread] Current Thread [Next in Thread>