linux-kernel - IPv4 NAT UDP Traversal issue

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <k2w363172901004191854t72fa19fahdb93fa498b23fcf6@mail.gmail.com>
Date:	Tue, 20 Apr 2010 09:54:52 +0800
From:	飞颜 <win847@...il.com>
To:	linux-kernel@...r.kernel.org
Subject: IPv4 NAT UDP Traversal issue

Dear all,

       I have a question about Linux NAT, our Product is ADSL
Router(Linux Version is 2.6.22.15), and Now our customers requirment
is below:

       IPv4 Nat: UDP Traversal through NAT, must support STUN
(RFC3489)  the four ways: Full Cone、Restricted Cone、Port Restricted
Cone and Symmetric

       As I known, netfilter IPv4 NAT is belonged to Symmetric type.
and if want UDP Traversal through NAT, NAT Device can not be Port
Restricted Cone and Symmetric type if the other is Symmetric type.

       So my question is: Can iptable set the UDP NAT converted to
Full Cone or Restricted Cone type?

       we now set NAT use iptables below：

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
MASQUERADE  all  --  anywhere             anywhere

       Thanks very much!

BR,
win847
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/