Hacker News new | ask | show | jobs
by general1465 58 days ago
Misconfigured firewall is a gaping hole. Misconfigured NAT is not letting data from outside into your local network.

So firewall is actually worse than NAT.
1 comments
Dagger2 58 days ago
Even a correctly-configured NAT will let connections in from outside, and a lot of people don't understand this.

Personally I'd count "your security thing doesn't actually do the thing it's supposed to do" as being pretty bad on the security scale. At least people understand firewalls.

link
general1465 57 days ago
> Even a correctly-configured NAT will let connections in from outside, and a lot of people don't understand this.

Yes, that's called port forwarding and it is normal thing. You actually want that.

link
Dagger2 57 days ago
It will let them in without a port forward in place. The port forward just rewrites the IP on an incoming connection, nothing more.
link
general1465 57 days ago
If you can reuse opened connection, but that will work with firewall too.
link
Dagger2 57 days ago
You don't need any tricks like that. Regular new connections will work.
link
general1465 56 days ago
No it won't because that's not how NAT is working.
link