Aaron Wetherhold wrote:
>
> I�ve read this list for a while now, and something I�m still unsure about is
> how secure is Network Address Translation as a security measure?
>
If your translator is dynamic and well written, you can be reasonably
certain that people can't open connections from the outside to ports
on the inside that you don't want them to connect to.
However, that in and of it self doesn't buy you complete security.
Subscribe to bugtraq or go look in the archives, www.securityfocus.com,
and search for vulnerabilities having to do with your mail server,
or your favourite browser,
or mail reader,
or the entire office suite,
or your operating system,
or ...
or ...
or ... :-)
You'll break out in a cold sweat, I promise.
/Mike
--
Mikael Olsson, EnterNet Sweden AB, Box 393, S-891 28 �RNSK�LDSVIK
Phone: +46-(0)660-105 50 Fax: +46-(0)660-122 50
Mobile: +46-(0)70-248 00 33
WWW: http://www.enternet.se E-mail: [EMAIL PROTECTED]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]