Does NAT modify sequence number in packet ?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



This is a multi-part message in MIME format.

------_=_NextPart_001_01C296B2.DDBFA8D9
Content-Type: text/plain;
	charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

Hi,
>
>Does NAT change Sequence number in packet ? or only change IPAddress =
and/or=20
>Port
>

Under normal circumstances only the IP address(es) and sometimes port
numbers are changed. But if a connection tracking NAT module (eg.=20
ip_nat_ftp, ip_nat_irc) changes the data payload to make it correspond
to the IP addresses in the IP header, then it's is possible that
the original packet's length changes and then sequence numbers are
adjusted accordingly by the NAT code.

Regards,
Filip





------_=_NextPart_001_01C296B2.DDBFA8D9
Content-Type: text/html;
	charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3DWindows-1252">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
6.0.6249.1">
<TITLE>RE: Does NAT modify sequence number in packet ?</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->

<P><FONT SIZE=3D2>Hi,<BR>
&gt;<BR>
&gt;Does NAT change Sequence number in packet ? or only change IPAddress =
and/or<BR>
&gt;Port<BR>
&gt;<BR>
<BR>
Under normal circumstances only the IP address(es) and sometimes =
port<BR>
numbers are changed. But if a connection tracking NAT module (eg.<BR>
ip_nat_ftp, ip_nat_irc) changes the data payload to make it =
correspond<BR>
to the IP addresses in the IP header, then it's is possible that<BR>
the original packet's length changes and then sequence numbers are<BR>
adjusted accordingly by the NAT code.<BR>
<BR>
Regards,<BR>
Filip<BR>
<BR>
<BR>
<BR>
</FONT>
</P>

</BODY>
</HTML>
------_=_NextPart_001_01C296B2.DDBFA8D9--



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux