Actually it works because you are running the server on the computer
acting as the gateway to you local lan. If you took the firewall off
(and left the routing tables in tact) it should still work.

NAT rules are normally tied to network interfaces (for security
reasons).
Ex:
Traffic arriving on the external interface (internet) translate IP's to
non-routable.

Traffic arriving on the internal interface (lan) translate non-routable
IP's to routable IP's.

You can have special case NAT rules based on originating IP addresses,
but that opens you to IP spoofing attacks. That is why NAT rules are
tied to network interfaces and why it is problematic addressing lan
computers from inside the lan by their routable IP's.

In general I would be suspicious of any appliance that allowed a
configuration where lan computers could be addressed by routable IP's.
You may not be as secure as you think, but the gamble is yours to take.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Beranek
Sent: Thursday, September 23, 2004 11:09 AM
To: [EMAIL PROTECTED]
Subject: Re: Behind a belkin router WAS :Re: [hlds] Latest Client
Update.

Stephen Moretti (blueyonder) wrote:
> Deadman Standing wrote:
>
>> Yes that is correct. The slap is optional.
>>
>>
> mutter....I should have known that....
>
> Thank you - wish someone had said this to me months ago when I was
first
> tinkering with this!

It's not always going to be true. If I run a server on my Linux box,
which is also my firewall, I can happily contact the server using my
public IP address from my private network. The server also shows up on
the Steam server list from Steam clients in my network.

It's all up to firewall/NAT configuration/implementation.

> Stephen

John.

--
John Beranek                         To generalise is to be an idiot.
http://redux.org.uk/                                 -- William Blake

_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds




_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds

Reply via email to