[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Hipsec] Selection of LSI address block



Henderson, Thomas R wrote:

Hi,

there may be also some applications that don't scan networking and assume that all 192.168.0.0 and 10.0.0.0 networks are NATted. Such as p2p software.

good point.  Although this would be akin to a case where both peers are
behind the same NAT, it may cause extra NAT traversal machinery to kick
in.

btw, I am not saying that this is the right way to implement applications. In fact, ICE has a completely different philosophy which is more obvious when you think about building a large, isolate "lab" network from the private address range. But some apps, nevertheless, are just doing this even though it's "wrong".