this post was submitted on 24 Jun 2024
671 points (98.0% liked)

Programmer Humor

31214 readers
655 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 4 points 1 week ago* (last edited 1 week ago) (3 children)

You can get exactly the same benefit by blocking non-established/non-related connections on your firewall. NAT does nothing to help security.

Edit: BTW--every time I see this response of "NAT can prevent external access", I severely question the poster's networking knowledge. Like to the level where I wonder how you manage to config a home router correctly. Or maybe it's the way home routers present the interface that leads people to believe the two functions are intertwined when they aren't.

[–] AceBonobo 1 points 1 week ago* (last edited 1 week ago) (2 children)

I didn't mean prevent, just makes it harder by default. You can still open connections from within the NAT

Edit: I do admit to failing at accessing my IPv6 PC from my IPv6 phone

Edit2: apparently NAT is full of security bugs

[–] [email protected] 2 points 1 week ago (1 children)

If your home router blocked incoming connections on IPv4 by default now, then it's likely to continue doing so for IPv6. At least, I would hope so. The manufacturer did a bad job if otherwise.

[–] AceBonobo 1 points 1 week ago

I figure the mobile carrier was blocking incoming connections to my phone. This was a couple of years ago, things might have changed since then.