Firewall Wizards mailing list archives
Re: Transparent NAT
From: Predrag Zivic <pzivic () yahoo com>
Date: Thu, 21 Sep 2000 12:27:05 -0700 (PDT)
I agree, double NAT is not a good idea. UDP and TCP protocols like FTP will not work (I tried it and got burned with it...). So as suggested no need for NAT on your router. Just a VPN NAT should do it. Pez --- "Michael C. Ibarra" <ibarra () hawk com> wrote:
Quoting cdschuler () home com:Today I met with a VPN appliance manufacturer. Iwas told thatthere is a significant problem with NAT when thereis a routerbetween the VPN appliance and the end user. Fromwhat I'm toldthe problem lies with the fact that both the VPNand the router areconducting NAT between each other and thereforethere needs tobe transparent NAT to alleviate this. They don'thave the softwarepatch yet. Is there a patch for this on thesoftware side rather thanpurchasing their additional hardware to fix it? Thank you, Cameron SchulerEvery router I know of that does NAT'ing, has the ability to turn off this feature. Decide, NAT on the router or NAT on your VPN appliance, turn one off, preferably, in your case, turn it off on the router. -mike The information contained in this message is not necessarily the opinion of Hawk Technologies, Inc. _______________________________________________ Firewall-wizards mailing list Firewall-wizards () nfr net http://www.nfr.net/mailman/listinfo/firewall-wizards
__________________________________________________ Do You Yahoo!? Send instant messages & get email alerts with Yahoo! Messenger. http://im.yahoo.com/ _______________________________________________ Firewall-wizards mailing list Firewall-wizards () nfr net http://www.nfr.net/mailman/listinfo/firewall-wizards
Current thread:
- Transparent NAT cdschuler (Sep 19)
- Re: Transparent NAT Michael C. Ibarra (Sep 20)
- <Possible follow-ups>
- Re: Transparent NAT Predrag Zivic (Sep 22)
- Re: Transparent NAT james (Sep 22)