Worth Reading: NatJack « ipSpace.net blog

Every time I wrote something along the lines of NAT is not a security feature, I got the expected pushback from people defending their bad suboptimal design choices. Fortunately, rational1 engineers no longer need to have that discussion: the NatJack website documents2 a half-dozen attacks on typical NAT implementations. Obvious next step: coping mechanisms like “this is all theoretical”, like the “but the remote host cannot reply” argument made 23 years after the Slammer worm 🤦‍♂️.

Source: https://blog.ipspace.net/2026/09/worth-reading-natjack-nat-security. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.