Please correct me if I'm wrong.
To my sense it depends on what you what to happen when there is a software failure.
In the case of firewall, if the sofware fails because of an exploit, brute force or any other case which makes the firewall stop. The packets will go trought without any filters because the ips are routable.
In the same this happen where NAT is involved. 'Natting' will also stop thus dropping every packets. I don't think you can use only one of the two solutions, but you cannot rely on filtering alone.
~M
Slashdot Mirror
Please correct me if I'm wrong.
To my sense it depends on what you what to happen when there is a software failure.
In the case of firewall, if the sofware fails because of an exploit, brute force or any other case which makes the firewall stop. The packets will go trought without any filters because the ips are routable.
In the same this happen where NAT is involved. 'Natting' will also stop thus dropping every packets. I don't think you can use only one of the two solutions, but you cannot rely on filtering alone.
~M