IP NAT and LovSan

[LW]

does using IP NAT on a router prevent attacks such as
LovSan?

 

[Ron Lowe]

does using IP NAT on a router prevent attacks such as
LovSan?

Yes, in the first instance, because the NAT will drop the
unsolicited inbound connection.

Essentially, NAT is an inbound firewall

Unless, of course, you have explicitly port-forwarded
the target ports to a vulnerable machine

But that's not a good reason to be lax when it
comes to keeping your patches up to date.

And an up-to-date virus scanner.

Another persom could bring an infected machine
onto the LAN, where it won't be behind NAT.