On 2/13/26 4:36 PM, Jeffrey Walton wrote:
On Fri, Feb 13, 2026 at 5:58 AM john doe <[email protected]> wrote:
[...]
Oh, one other thought: in my readng on the Internet, at least one person
suggested that switching to IPv6 could resolve my (or somebody's ;-)
problems
-- if that is a solution, I might consider it. (IPv6 is Greek to me,
and I've
resisted it up-to-now because I feel somewhat secure behind NAT
NAT simply ensures that private IPv4 addresses are not routed on the
internet, that has nothing to do with security!
I don't think this is correct.
The firewall usually ensures private network packets do not reach the WAN
interface. That is, the packets are not passed from the LAN interface to
the WAN interface. Look for firewall rules for the LAN that says something
like "Block private networks" (RFC 1918 networks) and "Block bogon
networks" (IANA Reserved).
Sorry if I was not clear.
I was only talking about SNAT
(https://jumpcloud.com/it-index/what-is-source-nat-snat).
A firewall has also other means to restrict outbound connections, so
yes you are correct.
--
John Doe
