Reply to post: Re: A short and inaccurate history of NAT routers in the home

Windows 10 networking bug derails Microsoft's own IPv6 rollout

Nanashi

Re: A short and inaccurate history of NAT routers in the home

You're right -- NAT has indeed become a religion. The reality is that it's not required for security in the slightest. In v6, everything comes into your home via the router, and the router drops all inbound connections unless explicitly configured otherwise. That should sound familiar, because it's the exact behavior that you're attributing to NAT.

(In fact, as mentioned earlier in the comments, NAT often gives people a false sense of security, because it doesn't actually block any connections at all. Anybody that can send packets to your router with a dest IP set to 192.168.1.x can connect to your LAN machines regardless of any NAT going on on the router. It's true that most of the internet won't be able to do that, but your ISP certainly can, and so can any government agencies that feel like leaning on the ISP. You want your network to be actually secure? You can't use NAT for that.)

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon