Re: Airport NAT behavior
Re: Airport NAT behavior
- Subject: Re: Airport NAT behavior
- From: email@hidden
- Date: Mon, 27 Mar 2006 17:23:00 -0700
On Mar 24, 2006, at 2:13 PM, Tim Dorcey wrote:
I have noticed that for UDP traffic the Airport NAT appears to
operate as a
"Symmetric NAT," in the terminology of RFC3489. This means that a
single
internal (address,UDP port) is mapped to multiple public ports, a
different
one for each remote (address,port) it is interacting with. I
wonder if
anyone can explain the rationale for this?
Wow that is really aweful if true, since I just spent the last 3
years writing tunneling software to go through NATs to prevent the
suckage that is online gaming today (having to open ports manually,
which involves chatting with your friend all afternoon, with a 50/50
chance of ending in failure), and that is probably the main router
people will be using. Just so everyone knows, symmetric NAT is by
far the worst of all mappings, because it's the only one you can't
get around with standard UDP calls, even with a main tracker server
somewhere to pair up peers. Some claim it is for "security", so it
is arguably a "feature", but this is like saying that having to call
your boss to open the door on your car so you can let a friend in is
for "security". I do seem to remember my friends having a lot of
trouble getting some p2p stuff working with the airport, although I
might be remembering wrong. Does anybody have anymore details on
this, especially instructions for making the 1:1 request, and if it
requires admin privileges on either the computer or router? Thanx,
------------------------------------------------------------------------
Zack Morris Z Sculpt Entertainment This Space
email@hidden http://www.zsculpt.com For Rent
------------------------------------------------------------------------
If the doors of perception were cleansed, everything would appear to man
as it is, infinite. -William Blake, The Marriage of Heaven and Hell
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden