From mboxrd@z Thu Jan  1 00:00:00 1970
From: Rick Jones <rick.jones2@hpe.com>
Date: Fri, 04 Dec 2015 18:46:55 +0000
Subject: Re: NAT, ICMP filtered, congestion troubles?
Message-Id: <5661DF9F.7090207@hpe.com>
List-Id: <lartc.vger.kernel.org>
References: <20151204093758.GD3204@sv.lnf.it>
In-Reply-To: <20151204093758.GD3204@sv.lnf.it>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: lartc@vger.kernel.org

On 12/04/2015 01:37 AM, Marco Gaiarin wrote:
> AFAIK, congestion avoidance are handled by the firewall, not
> the internal/natted host.

Does it?  I would think that the NAT/firewall would be maintaining only 
the state needed to perform the address translations, leaving the 
congestion avoidance (and response to the likes of say an ICMP 
Destination Unreachable, Fragmentation Needed and DF set) to the 
"actual" TCP endpoint.

rick jones