Because of NAT, almost all users now are accessing internet via private IPs, and that's happening whether the users are behind a simple home router, or a complex proxy server.
So, and as I understand it, we have the followings:
- In case of Bind_TCP connections, backdoors are useless to plant on victims, because we can't access directly.
- In case of Reverse_TCP, it stays the same, we can't inject our private IP in the payload and wait a connection on a private IP.
And even if the attacker used port forwarding on his router and injected his public IP with the payload, that will make him traceable.
So in both ways, NATing is protecting us with private IPs, is that true or am I missing something?
My network admin is convinced that NATing via proxy is enough for protection. I know that he's wrong, but I don't know how to convince him, and the NATing is used basically to protect from outside attackers, malwares from internet, dns spoofs, and any network based attacks.