RE: How does iptables NAT handle IPsec ESP with NAT-T UDP header ?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Pascal,
OK, I think I got it now  :-)
For each session the destination IP address is kept as part of the session identifier key as well ?
So, for my example, there are 2 unique entries in the NAT table, without the need for UDP src port change.
However, if 2.1.1.1 will send a packet to 10.0.0.2,
a 3rd entry will be created, this time with the src UDP 4500 changed to some "new-port" in order
to distinguish from the 2nd entry (in which destination address is same 10.0.0.2) ?
While the 2nd entry will continue to handle packets 10.0.0.2/4500->10.0.0.101/4500,
the 3rd entry will handle packets 10.0.0.2/4500->10.0.0.101/"new-port".
Am I right ?

Many thanks for the support and patience !

Guy

��.n��������+%������w��{.n����z��׫�)��jg��������ݢj����G�������j:+v���w�m������w�������h�����٥




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux