> -----Original Message----- > From: [email protected] [mailto:[email protected]] On > Behalf Of Sabahattin Gucukoglu > Sent: Wednesday, March 31, 2010 5:43 PM > To: [email protected] > Subject: NAT Traversal With ICMP Replies > > http://samy.pl/pwnat/ > > The idea is that NATs let back ICMP replies and send them to > hosts behind them if they suspect them to be responses to > messages sent from those hosts. So, by making the reply > fixed and having a server behind a NAT continuously sending > the ICMP query that would elicit it, a server can learn a > client's IP address, and thus begin communication without a > central rendezvous server. > > An interesting idea, for sure.
Several drawbacks, though, including no provision for multiple PWNAT devices behind the same NAT. Varying the ICMP query address could resolve that, to some degree (modulo birthday collisions). > It might not be super > efficient, and there's the question of whose network gets all > these ICMP messages. http://ws.arin.net/whois/?queryinput=3.0.0.0 > Are we using it anywhere already? We = IETF? No. -d _______________________________________________ Ietf mailing list [email protected] https://www.ietf.org/mailman/listinfo/ietf
