DNAT is not any less secure than a reverse proxy..if you have your machine patched correctly and the webserver correctly configured then you will be fine..since it is only port 80 and 443 are the only ports required for a webserver..the rest can be left blocked at hte firewall.....if the machine gets owned in a properly setup DNAt it is either an admin config problem or a software vulnerability..
Hi, there is one fine difference between DNAT and reverse proxy so if i am right : -dnat gets the packet as is and puts it to the target only the header is modified. -a reverse-proxy generates a new, clean and right packet with the same content as before
Hi, there is one fine difference between DNAT and reverse proxy so if i am right : -dnat gets the packet as is and puts it to the target only the header is modified. -a reverse-proxy generates a new, clean and right packet with the same content as before
