Security checks in the incoming packets to NAT ports?

2002-03-25 Thread Pekka Savola
Hi, As characterized by C. Huitema of Microsoft in http://www.ietf.org/internet-drafts/draft-ietf-ngtrans-shipworm-05.txt (IPv6 tunnels through NAT's using UDP), there are basically 4 kinds of NAT's wrt. how strictly they check the incoming packets to allocated NAT ports: --8-- Experience

Re: Security checks in the incoming packets to NAT ports?

2002-03-25 Thread Pekka Savola
On Mon, 25 Mar 2002, Harald Welte wrote: On Mon, Mar 25, 2002 at 02:48:22PM +0200, Pekka Savola wrote: Hi, 4) Finally, some NAT map the same internal address and port pair to different external address and port pairs, depending on the address of the remote host. These NATs are

Re: Security checks in the incoming packets to NAT ports?

2002-03-25 Thread Henrik Nordstrom
Pekka Savola wrote: I take it you don't comment on how ipchains/ipfwadm NAT does this? That knowledge would also be very much appreciated as there are still (mostly) 2.2 -kernel boxes around. The NAT capabilities of Linux-2.2 ipchains is quite limited, only having masquerade NAT. It maps