Comment by kortilla
1 month ago
you missed the part about an ACL. You’re whole shtick depends on a bad implementation of routing rules.
What you’re describing would happen if NAT were completely disabled. You’re just describing an open router
1 month ago
you missed the part about an ACL. You’re whole shtick depends on a bad implementation of routing rules.
What you’re describing would happen if NAT were completely disabled. You’re just describing an open router
There's no inherent ACL in NAT, and adding one would just demonstrate that ACLs can block packets, which we already knew.
> What you’re describing would happen if NAT were completely disabled. You’re just describing an open router
Yep. It also happens when NAT is enabled. A router doing NAT is exactly the same thing as an open router -- it just has the additional property of editing outbound connections to appear to come from the IP of the router itself.
If NAT on its own blocked inbound connections, I would have seen that in my tests.