[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[dccp] Re: RFC - DCCP and NAT



Ian McDonald wrote:
Some people use 11.x.x.x, others use other subnet numbers.

Determining "behind NAT" is flawed, the whole point is for
it to be transparent anyways.


Agree - but which is better - flawed and working or perfect and not?

I think you really need to bite the bullet and start working
now on proper NAT deployment for DCCP.  In the time you spend
working on half-working hacks you can have most of the firewalls
out there fixed.


Disagree - I have no control over people's firewalls and I think I could write this patch in a few hours. (Arnaldo could probably write in 30 minutes!)

I started working on DCCP connection tracking, so far it properly tracks connections and state transistions (but I need to recheck them). NAT should possible in a matter of minutes once connection tracking is working properly.