Networking noob here. I want to prevent all incoming requests except through a specific port, and that traffic is forwarded to a specific device on the network. NAT seems to do that just fine, it’s almost like a kind of firewall by itself. What kind of threats are there that requires more than just NAT for security?

  • kevincox@lemmy.ml
    link
    fedilink
    English
    arrow-up
    8
    ·
    8 months ago

    it is simply Security Through Obscurity at best.

    I think this is a bit too strong. The bit about NAT that people associate with improved security is that it acts as a stateful firewall. This basically means that it allows outbound connections not inbound connections.

    A preventing inbound connections does provide a meaningful reduction in attack surface. No longer is every vulnerability scan on the internet going to probe your machine and it is going to be much harder for a remote attacker to get access.

    However there are two main flaws:

    1. Stateful firewalls are not perfect filters of incoming connections.
    2. Local devices still have full access to your device.