Hacker News
points by hdgvhicv 2 days ago | 0 comments
I can’t think of a single time I’ve wanted to connect between two hosts when I haven’t specifically allowed one through a firewall
[–] drum55 2 days ago
NAT are not firewalls.
[–] hdgvhicv 1 day ago
Functionally they are. Allow traffic aiming at this address and this port to arrive on this server.

Not that my WireGuard connection needs nat as it terminates on my router. And I use private ip ranges as I want to be sure that if WireGuard drops out for some reason traffic doesn’t route over the unencrypted path. Defence in depth.