If NAT is security, double NAT must be double security! 
@catsalad imagine full-cone NAT 
@catsalad
Carrier Grade NAT is security for people who carry things uphill.

@catsalad if ROT13 is encryption, double ROT13 must be double encryption!

๐Ÿ˜

@ij @catsalad I always store government secrets in ROT3328.
@ij @catsalad Thatโ€™s just simple math right there.
@catsalad that's why i have triple NAT โ€‹โ€‹

CG-NAT
NAT in the shitty ISP modem/router
NAT in my own router

no way to open up ports anyway on this ISP anyway so i'm not really losing anything
@jiub @catsalad That's what VPS+VPN is for ... To circumvent lousy ISP limitations.
@dazo @catsalad indeed, i forward my server's ssh port to a vps using autossh so i can easily log in remotely and access everything on the lan from there

i don't mind accessing things in an ad hoc manner so i haven't bothered with a full vpn yet
@catsalad If reverse proxy is security.... Actually maybe that would be double? Hmmmm ๐Ÿค”
@catsalad it isnโ€™t exponential?
@catsalad More hairpins in my NAT than a drag queen's wig. ๐Ÿ’…๐Ÿฝ
@catsalad From 2FAto 2FNAT? To 12 Factor NAT?
@catsalad good luck, Iโ€™m behind seven NATs

@catsalad

no NAT November is over

@catsalad

If you have 20 of them, it's a NAT 20 

@SleepyCatten @catsalad
And that means you win no matter what.

@silvermoon82 Depends on whether your admin has set up the network policies based on RAW or has applied a few homebrewed policies.

By default, whenever you've got NAT 20, the admin's remote powers are all critical successes, and they automatically succeed on all attempts to prevent network downtime.

With some homebrew policies, the admin might automatically succeed on all their physical actions too, such as moving servers around, routing ethernet cable like a pro, catching drives that try to fall out during hotswapping, preventing a DDOS attack, or plugging in a USB device the correct way round first time.

@catsalad

@catsalad The joys of 0 multiplication.

@catsalad

Double NAT is a pain in the ass

@catsalad what double NAT might look like

@catsalad I once put a host behind NAT46 > NAT64 > NAT44... It was reachable when it felt like it.

I really need to add NAT66 to complete the set.

@dfirebug NAT66 is such a cursed concept (I love it) ๐Ÿ˜น