OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: FW: UDP with NAT
From: Ye, Xiaodong (xyeICTV.com)
Date: Wed Oct 04 2000 - 16:51:41 CDT

> -----Original Message-----
> From: Ye, Xiaodong
> Sent: Wednesday, October 04, 2000 11:31 AM
> To: Jeffery. Gieser (E-mail)
> Cc: Firewall list (E-mail) (E-mail)
> Subject: UDP with NAT
>
> Thanks Jeffery and thanks all,
>
> Case1:
> LAN,
> 192.168.1.0-192.168.1.255
> PC1, 192.168.1.5
> PC2, 192.168.1.6
> stateful inspection firewall+NAT, internal: 192.168.1.1
> external:
> 12.2.2.1
> default
> config: Allow all from LAN to WAN, Deny all from WAN to LAN
> website with streaming video,
> 202.*.*.*
> PC1 and PC2 all want to get the streaming video content(like MEDIA
> PLAY,REAL VIDEO,QUICKTIME) from same internet website at the same time, as
> we all know that the streaming video all use the UDP as the first choice
> to send back the streaming data,then two streaming data back to the NAT
>
> Can firewall+NAT figure out which one is for PC1 and which one is for PC2?
> How could it realize,or what's the feature of the stateful inspection
> firewall +NAT could do this job?
>
>
> Case2: situation is mostly same as CASE1,only the website is a
> security site(like banking)
> If PC1 and PC2 want to connect to a same security site,definitely they
> will have the same external real ip address 12.2.2.1(assigned by NAT),Will
> that secrity site could figure out who is who and could let them login
> correctly?
> Could NAT technology could sovle this kind of problem?
>
> Regards,
> Yale
>
>
-
[To unsubscribe, send mail to majordomolists.gnac.net with
"unsubscribe firewalls" in the body of the message.]