ietf
[Top] [All Lists]

RE: NAT Traversal With ICMP Replies

2010-04-02 11:18:48
-----Original Message-----
From: ietf-bounces(_at_)ietf(_dot_)org 
[mailto:ietf-bounces(_at_)ietf(_dot_)org] On 
Behalf Of Sabahattin Gucukoglu
Sent: Wednesday, March 31, 2010 5:43 PM
To: ietf(_at_)ietf(_dot_)org
Subject: NAT Traversal With ICMP Replies

http://samy.pl/pwnat/

The idea is that NATs let back ICMP replies and send them to 
hosts behind them if they suspect them to be responses to 
messages sent from those hosts.  So, by making the reply 
fixed and having a server behind a NAT continuously sending 
the ICMP query that would elicit it, a server can learn a 
client's IP address, and thus begin communication without a 
central rendezvous server.

An interesting idea, for sure. 

Several drawbacks, though, including no provision for multiple
PWNAT devices behind the same NAT.  Varying the ICMP query 
address could resolve that, to some degree (modulo birthday 
collisions).

It might not be super 
efficient, and there's the question of whose network gets all 
these ICMP messages. 

http://ws.arin.net/whois/?queryinput=3.0.0.0

Are we using it anywhere already?

We = IETF?  No.

-d

_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf

<Prev in Thread] Current Thread [Next in Thread>