BabyJane said:
Please explain the router part with NAT and SPI. Also can you
recommend a good one, please? Nothing wireless.
Thanks,
Jane
Actually, by definition, all routers have NAT, which is Network Address
Translation. NAT is what separates the Internet (WAN) from your local
network (LAN), even if it's only one machine we're talking about being
connected to the router. NAT by default uses an address translation
table to route traffic from the WAN side to the LAN side. For that to
happen, there must be data in the routing table already originating from
the LAN side. No data from the LAN side going out, no data from the WAN
side coming in, unless you somehow otherwise allow that to happen. Most
routers include a Stateful Packet Inspection feature (SPI), to varying
degrees. SPI is useful for monitoring the state of a connection to make
sure that the packets coming in form the WAN are valid, mirrored
responses to the packets going out from the LAN side. Now, firewall
appliances or UTM appliances ratchet SPI up several notches and allow
the user to configure much stricter packet management.
My experience with most routers is they are cheap and therefore, I
couldn't in all sincerity recommend anything specific. Which is why I
decided to open my check book and buy a UTM appliance. Someone else
might be able to offer you a good recommendation on routers.