All of lore.kernel.org
 help / color / mirror / Atom feed
From: Olivier GRALL <olivier.grall@neotip.com>
To: netfilter@lists.netfilter.org
Subject: [IPTABLES] Symmetric NAT ?
Date: Tue, 18 Oct 2005 09:07:55 +0200	[thread overview]
Message-ID: <43549F4B.2060705@neotip.com> (raw)

Hi,

I was making some tests with STUN when I realize that my NAT box was a 
simple Linux Box with an IPTABLES rule with a MASQ target. What seemed 
strange to me was that the STUN result was "Port restricted cone ".

I made a new with NATcheck.exe... same result.
http://midcom-p2p.sourceforge.net/

I was sure IPTABLES NAT was Symmetric and not Port restricted cone. What 
about it ?
In the "Procceding of NetFilter Developer WorkShop 2004",  Harald Welte 
reported "

netfilter however implements (SNAT and MASQ) as ssymmetric.
"


For me, with MASQ it is Port restricted cone and with SNAT+DNAT it is 
Symmetric. Is it true ?

Thanx,
-- 

	
Olivier GRALL
R&D Engineer 	*NeoTIP** S.A.*
4, rue Louis de Broglie
22300 Lannion
France
olivier.grall@neotip.com <mailto:olivier.grall@neotip.com> 	+33 (0)2 96 
48 66 94



             reply	other threads:[~2005-10-18  7:07 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-10-18  7:07 Olivier GRALL [this message]
  -- strict thread matches above, loose matches on Subject: below --
2005-10-14 12:10 [IPTABLES] Symmetric NAT? Olivier GRALL
2005-10-16 14:33 ` Harald Welte

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=43549F4B.2060705@neotip.com \
    --to=olivier.grall@neotip.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.