North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re[2]: Where NAT disenfranchises the end-user ...

  • From: Richard Welty
  • Date: Mon Sep 10 13:49:36 2001 
On 10 Sep 2001 13:29:58 -0400 Scott Gifford <[email protected]> wrote:

> I've actually seen the question of how NAT breaks the Internet more
> than a good stateful firewall come up more than once, and haven't
> really seen a satisfactory answer.  Where does a stateful firewall
> configured to only allow outgoing connections work that NAT doesn't?

in the case of IPSec, the IP addresses need to be preserved end-to-end
as part of the whole security scheme.

richard
--
Richard Welty                                    Averill Park Networking
[email protected]                                      518-573-7592