gmcintire
Graham
Premium
join:2005-08-09
Blue Ridge, TX
| reply to Diddy1
The masquerading box acts as a firewall because it only accepts incoming connections that clients behind it have opened. A good explanation can be heard in episode #3 of Security Now: »www.grc.com/SecurityNow.htm (excellent podcast from Leo Laporte and Steve Gibson if nobody else is familiar with it). They can explain it more "user friendly" than I can, so I'll let you learn from them.
The biggest problems with NATs is any service that needs an incoming connection from the public Internet. Some of the most common programs to break are VPNs and peer-to-peer traffic (although it doesn't stop p2p, just slows down).
90% of your customers who just use the service for web browsing and email won't even notice if they're behind a NAT. |
