On Mon, Mar 25, 2002 at 02:48:22PM +0200, Pekka Savola wrote:
> Hi,
> 

> 4) Finally, some NAT map the same internal address and port pair to
> different external address and port pairs, depending on the address
> of the remote host. These NATs are usually called "symmetric NATs".
> 
> Measurement campaigns and studies of documentations have shown that
> most NAT implement either option 1 or option 2, i.e. cone NATs or  
> restricted cone NATs. The Teredo solution ensures connectivity for 
> all NAT types and all configurations, but it is legitimate to seek 
> an optimization in the case of cone NAT or restricted cone NATs.   
> --8<--
> 
> I'm curious which kind of NAT does Netfilter (and possibly old ipchains 
> NAT) use?

netfilter/iptables uses NAT-style four as described in the above
document.

> Pekka Savola                 "Tell me of difficulties surmounted,

-- 
Live long and prosper
- Harald Welte / [EMAIL PROTECTED]               http://www.gnumonks.org/
============================================================================
GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M+ 
V-- PS++ PE-- Y++ PGP++ t+ 5-- !X !R tv-- b+++ !DI !D G+ e* h--- r++ y+(*)

Reply via email to