[ipv6hackers] Is there a telecom company which adpated IPv6 network on LTE?
Owen DeLong
owend at he.net
Thu Aug 15 21:28:07 CEST 2013
> PS. NAT was not born to provide security, but it provides _some sort_ of
> security, and moreover it allows easier full logging of the traffic...
NAT does not provide any form of security and it makes full logging of traffic
more difficult.
Stateful inspection provides security. To the extent that NAT requires stateful
inspection, you get Stateful inspection (and it's related security) for free by
implementing NAT.
However, if your NAT is a stateless 1:1 mapping, then you get no security, so
clearly NAT is not the part that provides the security.
As to logging of the traffic, again, NAT requires a single choke-point to work.
It is the single chokepoint that provides the easy logging of all traffic, not the
NAT itself.
Owen
More information about the Ipv6hackers
mailing list