Kurt D. Starsinic on Thu, 1 Apr 1999 20:45:19 -0500 (EST)


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: how secure is nat?


Jason Staloff wrote:
> My ISDN router uses NAT so it can hold a static IP address on my side as
> well as the dynamic address given it by my ISP.
> 
> I ran into a Web site that told me my IP address, and whaddya know it told
> me the local address, 208.0.39.44. Is this a security risk? Could my router
> allow someone get into my network? OK I know that's a really naive way to
> put it.... What should I do to stay as secure as possible?
> 
> I'm assuming this was done by reading the CGI environment variable
> REMOTE_ADDR.

    Yes.

> Is there any other way this information could be passed along?

    No.

> Is NAT reasonably safe?

    Define `safe'.  Noone can establish a connection to your machine
from the other side of the NAT.  Will that do?

    Peace,
* Kurt Starsinic (kstar@isinet.com) ------------------ Technical Specialist *
|    `Using encryption on the Internet is the equivalent of arranging an    |
|     armored car to deliver credit-card information from someone living    |
|     in a cardboard box to someone living on a park bench.'                |
|                              - Gene Spafford                              |
Institute for Scientific Information                   http://www.isinet.com/

--
To unsubscribe, send a message with the word 'unsubscribe' in the subject
or body of your message to plug-request@lists.nothinbut.net