Philip JFless info
|visits||member for||2 years, 5 months|
|seen||Jun 9 at 5:50|
|bio||website||joyoftypes.blogspot.com||visits||member for||2 years, 5 months|
|location||seen||Jun 9 at 5:50|
Why do we have NAT if we could just assign a public IP address?
NAT does little for security. The fact that your NAT box is also state-full firewall provides security, but any state-full firewall could block incoming request with exactly the same effect as NAT. Whats more, it actually is a vulnerability because your single public IP is a point of infection for multiple computers (what if someone hacks your NAT), on the other-hand, a well engineered IP6 set up has a firewall that is invisible to the outside world, and each incoming computer has a unique IP address. At the smallest possible local network size that is 2^64 address to scan.