I was trying to explain to someone what a firewall does and then

>>60087227

ports are like phone line extensions or individual numbers for flats in a flat block, they tell you which individual place to go to once you get to a singular number or address that may represent many people

>>60087317
I guess that's a good analogy but it doesn't explain why you need them

Imagine a wall with thousands of doors.
Each of these doors can only have a single person behind them,and are otherwise closed.

The programs that want to send messages to the Internet either go to those doors directly to send and/or recieve messages, or they have to pass through a police officer, that will check who is sending/waiting for a message, where it came from, where it's going to, what door it's passed trough... and he has the power to tell them to go ahead, stop them, or move them to another port.

The doors are ports, and the officer is the firewall.

Imagine a port. It's got a bunch of piers where different vessels come and go. Say dock 80 is being blocked off by the port authorities. You want to get traffic through so instead you put your cargo on a ship docked at port 49,355. It's not often that people go that far down the dock so it's unlikely the authorities are bothering to block it, or thieves to intercept your cargo when more popular docks are vulnerable.

what the fuck does a firewall do that NAT doesn't

honest question

File: 1367336177510.jpg (38KB, 400x400px) Image search: [Google]

38KB, 400x400px

>>60087408
>It's not often that people go that far down the dock so it's unlikely the authorities are bothering to block it, or thieves to intercept your cargo when more popular docks are vulnerable.

>>60087429
What type of firewall? There's 5 types at least

>>60087429
A nat just moves trafic to it's own outgoing IP and one of the rarely used ports, a firewall can block traffic from specific ips, macs, Ports, some even filter content...

>>60087429
Are you retarded?