Re: SSH and NAT

["Marcelo Moreira" <marcelom@qualitau.com>]

> > The IP packet only contain some primitive information - if you wish to
deal
> > with names, then you have to use DNS. You can't store the name
information in
> > the packet header.
>
> Not quite sure what you mean by this? I've set up the DNS so that box1
> and box2 both point to an IP (albeit the same one as I only have the
> one) - an A record on the DNS server.

Ok. Let me see if I can explain this a little bit better.
An IP packet has only the numeric address information on it.
So essentialy, a ssh packet to box1 and another to box2 are
the same (except for time, sequence, flags, etc).
The DNS information is not on the IP header at all. It is just
another protocol that is used to map names to numeric addresses.

> > I can recommend that you read about IP headers if you wish to know more
about
> > the construction of these magic little packets :-)
>
> I understand bits of it, but obviously not enough. :)
> Guess I should get reading!

Yes, I guess you should also. In fact, get the definitive IP guide:
TCP/IP Illustrated, Vols I II and III. Author is Stevens.
Have fun on your reading...

Marcelo.