Subject: Re: Network Address Translation and IP security
To: None <current-users@NetBSD.ORG>
From: None <is@Beverly.Rhein.DE>
Date: 02/17/1997 11:11:05
Mike O'Dell (firstname.lastname@example.org) wrote:
: but an equally useful bit of advice is
: "Plan to co-exist with NAT boxes because they WILL be used heavily."
Uh, as has been pointed oput already, NAT can not work except for some
special applications. It will not work in the presence of IPSEC, and it
need not work if you have IPv6, as IPv6 provides enough addresses for
every single key on your keyboard.
So my advice is: "don't tweak things more than absolutely necessary in
IPv4 --- it's not worth the effort".