RE: arguments against NAT?

2003-12-03 Thread Jeff Johnson
I'm not arguing about that, it is delaying things indeed. However I wonder which kind of instant messaging you are referring to, as all the ones I've seen work fine through NAT. Peer-to-peer CUSeeMe stopped working for me when I installed a NAT box at home. Now I can only do peer-to-peer

RE: arguments against NAT?

2003-12-03 Thread Michel Py
Armando, Michel Py wrote: I'm not arguing about that, it is delaying things indeed. However I wonder which kind of instant messaging you are referring to, as all the ones I've seen work fine through NAT. Armando L. Caro Jr. Yahoo and AOL (I have never used MSN). Sure, you can do normal

Re: arguments against NAT?

2003-12-03 Thread Valdis . Kletnieks
On Wed, 03 Dec 2003 09:15:07 PST, Michel Py said: In many enterprise environments, this would be a feature not a bug. There are some webcams that are definitely inappropriate in a business setup; given the lack of good enterprise content filtering solutions for IM, if NAT does break IM

Re: arguments against NAT?

2003-12-03 Thread Joe Touch
Michel Py wrote: Joe Touch wrote: Since we've been lacking a similar non-NAT solution, we (ISI) built one called TetherNet, as posted earlier: http://www.isi.edu/tethernet What is this beside a box that setups a tunnel? What's the difference with:

RE: arguments against NAT?

2003-12-03 Thread Armando L. Caro Jr.
On Tue, 2 Dec 2003, Michel Py wrote: I'm not arguing about that, it is delaying things indeed. However I wonder which kind of instant messaging you are referring to, as all the ones I've seen work fine through NAT. Yahoo and AOL (I have never used MSN). Sure, you can do normal chatting, but

RE: arguments against NAT?

2003-12-03 Thread Armando L. Caro Jr.
On Wed, 3 Dec 2003, Michel Py wrote: Michel Py wrote: I'm not arguing about that, it is delaying things indeed. However I wonder which kind of instant messaging you are referring to, as all the ones I've seen work fine through NAT. Armando L. Caro Jr. Yahoo and AOL (I have never used

Re: arguments against NAT?

2003-12-03 Thread Keith Moore
In many enterprise environments, this would be a feature not a bug. There are some webcams that are definitely inappropriate in a business setup; given the lack of good enterprise content filtering solutions for IM, if NAT does break IM webcams I don't have a problem with it. As of file

Re: arguments against NAT?

2003-12-03 Thread Leif Johansson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Keith Moore wrote: |In many enterprise environments, this would be a feature not a bug. |There are some webcams that are definitely inappropriate in a business |setup; given the lack of good enterprise content filtering solutions for |IM, if NAT does

Re: arguments against NAT?

2003-12-03 Thread grenville armitage
Michel Py wrote: [..] As of file transfer, it does not bother me either as like a lot of other network administrators I have a problem with users sharing their office computer files with anyone unknown on the net. I trust you frisk all employees for CD-R/RWs, floppies and USB sticks

arguments against NAT?

2003-12-02 Thread Zefram
A new sysadmin has recently joined the company where I work (I am a software engineer and part-time sysadmin). As he's the only full-time sysadmin here, the network now falls under his purview. Today he showed me his plans for reorganisation of the network, and they involve introducing NAT on a

Re: arguments against NAT?

2003-12-02 Thread Anthony G. Atkielski
Zefram writes: My question for the list is is there a web page or other document anywhere that comprehensively states the case against NAT? If your new administrator is of the type who fixes things that aren't broken, it may be the admininistrator that needs replacement, not the network

Re: arguments against NAT?

2003-12-02 Thread Spencer Dawkins
Yeah, but this was the point. Where is the community consensus document that says all this? Spencer - Original Message - From: Anthony G. Atkielski [EMAIL PROTECTED] To: IETF Discussion [EMAIL PROTECTED] Sent: Tuesday, December 02, 2003 6:55 AM Subject: Re: arguments against NAT

Re: arguments against NAT?

2003-12-02 Thread Spencer Dawkins
And, to follow up on my own posting (sigh), RFC 3235 and 3027 are Informational... we have no STD, and no BCP, that come up when you search for NAT or Network Address Translator, so... perhaps there is no community consensus document that says what the community consensus appears to be, and the

Re: arguments against NAT?

2003-12-02 Thread Melinda Shore
On Tuesday, December 2, 2003, at 08:22 AM, Spencer Dawkins wrote: Yeah, but this was the point. Where is the community consensus document that says all this? 3235 goes into some of it, albeit from an application perspective. 2993 does as well, but at three years old it's already slightly outdated.

Re: arguments against NAT?

2003-12-02 Thread Zefram
Spencer Dawkins wrote: Yeah, but this was the point. Where is the community consensus document that says all this? RFC 2993 is the closest thing I could find to what I want, and it's rather good (thanks Tony), so it's at the top of the reading list I've sent to the new sysadmin. I'll be

Re: arguments against NAT?

2003-12-02 Thread Eliot Lear
I've argued strongly against NAT, but he's one of those people who seem to be willing to accept arbitrary amounts of pain (we don't need to use [protocols that put IP addresses in payload], timeouts aren't a problem). I'm now pointing him at some relevant RFCs. My question for the list is is

Re[2]: arguments against NAT?

2003-12-02 Thread Anthony G. Atkielski
Spencer Dawkins writes: ... perhaps there is no community consensus document that says what the community consensus appears to be ... I don't believe there is any consensus. I'm among those who don't like NAT, considering it only an occasional, necessary evil.

RE: arguments against NAT?

2003-12-02 Thread Michel Py
Melinda Shore wrote: although frankly this is one particular area where there's a clear and growing divide between this community and the network administrator community (particularly enterprise and residential). Because this community has long ignored real problems and followed the lead of

Re: arguments against NAT?

2003-12-02 Thread Melinda Shore
On Tuesday, December 2, 2003, at 10:44 AM, Michel Py wrote: Because this community has long ignored real problems and followed the lead of protocol fanatics or rhetoricians that for the sake of technical elegance design protocols and architectures that look real nice on paper and don't solve

Re: arguments against NAT?

2003-12-02 Thread Joe Touch
Zefram, Our take on why NATs are bad is at: http://dsonline.computer.org/0207/departments/wp4icon.htm And our method for undoing what a NAT does, called TetherNet is at: http://www.isi.edu/tethernet and paper about it is at: http://www.isi.edu/touch/pubs/discex03-tethernet/ (Contact me if you

Re: arguments against NAT?

2003-12-02 Thread Paul Vixie
... I've argued strongly against NAT, but he's one of those people who seem to be willing to accept arbitrary amounts of pain (we don't need to use [protocols that put IP addresses in payload], how about DNS? two of the extra years that got tacked onto the decade of DNSSEC were due

Re: arguments against NAT? - what breaks

2003-12-02 Thread Doug Royer
Anthony G. Atkielski wrote: NAT has obvious disadvantages. ... ... Chat and instant messaging services will fail, and there is no way to get them to work with NAT. So far I have not been able to get chat or instant messages services to fail because of NAT. (Not that I am saying that NAT is

Re: arguments against NAT? - what breaks

2003-12-02 Thread Joe Touch
Doug Royer wrote: Anthony G. Atkielski wrote: NAT has obvious disadvantages. ... ... Chat and instant messaging services will fail, and there is no way to get them to work with NAT. So far I have not been able to get chat or instant messages services to fail because of NAT. (Not that I

Re: arguments against NAT?

2003-12-02 Thread Joe Touch
Melinda Shore wrote: ... I'm not sure if you're arguing that there should be a comprehensive document presenting the technical problems introduced by NATs. I suspect there should be, although frankly this is one particular area where there's a clear and growing divide between this community and

Re: arguments against NAT?

2003-12-02 Thread Keith Moore
My question for the list is is there a web page or other document anywhere that comprehensively states the case against NAT? Because until recently there was a widespread belief that we were stuck with NAT and might as well make the best of it, and that we couldn't make the best of it if we

RE: arguments against NAT?

2003-12-02 Thread Michel Py
Melinda, Melinda Shore wrote: The problems we're seeing from NATs - and they're considerable It depends of the situation; don't generalize, the reality of numbers is against you. The number of sites where NAT works just fine is orders of magnitude greater than the number of sites where it

RE: arguments against NAT?

2003-12-02 Thread Michel Py
Joe Touch wrote: Since we've been lacking a similar non-NAT solution, we (ISI) built one called TetherNet, as posted earlier: http://www.isi.edu/tethernet What is this beside a box that setups a tunnel? What's the difference with:

Re: arguments against NAT?

2003-12-02 Thread Masataka Ohta
Michel Py; Melinda Shore wrote: The problems we're seeing from NATs - and they're considerable It depends of the situation; don't generalize, the reality of numbers is against you. The number of sites where NAT works just fine is orders of magnitude greater than the number of sites where it