Re: Block all servers?

["Steven M. Bellovin" <smb () research att com>]

In message <Pine.LNX.4.44.0310110741350.20543-100000 () s1 yuriev com>, Alex Yurie
v writes:
> > Also what about folks who need to VPN in to their office
> > (either via PPTP or IPSEC)?  How would you take care of that
> > situation?
>
> IPSEC works over NATs just fine.
Not in the general case, no.  See draft-aboba-nat-ipsec-04.txt if you 
can find a copy.

                --Steve Bellovin, http://www.research.att.com/~smb