security without NAT?

Chris Hodgins chodgins at
Sun Feb 27 22:16:45 GMT 2005

Stevan Tiefert wrote:
> Hello list,
> I have a thinking problem... If workstations in a private network have set
> up a gateway, but the gateway has no NAT-deamon running, are the
> workstations not able to be attacked? What happens if these workstations
> behind this gateway are serving unprotected services (like shares on
> Windows XP Home Edition which are NOT password protected), are they also
> not be able to be attacked?
> I understand that if these workstations wants to request answers from
> outside the private network are never getting answers, but is it possible
> to see and attack theses workstations from outside?
> With regards
> Stevan Tiefert
> _______________________________________________
> freebsd-questions at mailing list
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at"

Well I just hope that you really locked down that gateway. :)  You have 
a few probs here:

1)  Your gateway is hijacked leaving your unprotected boxes at the 
attackers mercy.  Block everything

2)  Your unprotected machines are not up-to-date and by connecting to a 
dodgy public service something nasty is installed.  Say IE flaw for example.

3)  You are running a wireless access point.  Game over! :)

There are probably more but those are some of the main problems.  In 
general you are probably going to be ok as long as your gateway is 
locked down and if you run a WAP make sure it is also as secure as 
possible.  It is still a risk though!


More information about the freebsd-questions mailing list