duel firewalls??
- Thread starter dan188
- Start date
- Latest activity Latest activity:
- Replies 11
- Views 2K
I'd say that particular claim is a bit misleading. NAT and SPI are really little more than different levels of firewall protection. SPI does the grunt work, it's the real guts of a personal firewall. NAT is comparatively superficial, it merely hides your actual IP address. Think of NAT as putting a false street number on the front of your house, and of SPI as installing deadbolts on all your doors. If you're a dynamic IP subscriber, having your own NAT is redundant at best redundant. And some providers actually employ their own NAT server. But - given the potential for conflict - you might want to see what your provider recommends regarding NAT-enabled routers.
//greg//
//greg//
In my case, yes. In your case, we don't yet have enough info to make that conclusion. My recommendation is still to contact your provider to see whether they have their own NAT. If they don't, your personal NAT should be no problem. If they do, they should be able to tell you what to do about the NAT feature in your router. On some, it's a simple user option that can be enabled or disabled.
//greg//
//greg//
If provider does not run NAT (which they most likely don't), your router running nat is (in my opinion) an absolute must.
If you are using port forwarding and/or hosting any servers or services from your home via your router -- SPI is not a must, but I would certainly make use of it if I were you.
If you are using port forwarding and/or hosting any servers or services from your home via your router -- SPI is not a must, but I would certainly make use of it if I were you.
Technically yes, but those aren't what I had in mind.
I would suggest that if you are hosting a web server, ftp server, or other true server application that would constitute using SPI.
Services such as vonage, sling, and PS3 are fairly low-risk and you should be fine without SPI for those services.
I would suggest that if you are hosting a web server, ftp server, or other true server application that would constitute using SPI.
Services such as vonage, sling, and PS3 are fairly low-risk and you should be fine without SPI for those services.
Would it be paroina if I use both. Would you say its more about marketing or is it really safer
Last edited:
Given the response you got from the provider, I see nothing wrong with using both. Especially if you're paying for a private IP address. NAT protects your address, SPI protects your content.
//greg//
//greg//
