Comment by hdgvhicv
12 hours ago
I can’t think of a single time I’ve wanted to connect between two hosts when I haven’t specifically allowed one through a firewall
12 hours ago
I can’t think of a single time I’ve wanted to connect between two hosts when I haven’t specifically allowed one through a firewall
NAT are not firewalls.
Functionally they are. Allow traffic aiming at this address and this port to arrive on this server.
Not that my WireGuard connection needs nat as it terminates on my router. And I use private ip ranges as I want to be sure that if WireGuard drops out for some reason traffic doesn’t route over the unencrypted path. Defence in depth.