Re: icmp problem
From: Arne (arne_woerner_at_yahoo.com)
Date: 05/11/05
- Previous message: george roman: "icmp problem"
- Next in thread: Danil V. Gerun: "Re[2]: icmp problem"
- Reply: Danil V. Gerun: "Re[2]: icmp problem"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 11 May 2005 13:57:23 -0700 (PDT) To: george roman <thewolfro@yahoo.com>, freebsd-security@freebsd.org
--- george roman <thewolfro@yahoo.com> wrote:
> hi i have a problem with my icmp, i have a router that
> performs nat. i cannot ping to internet hosts from
> more than one stations situated behind NAT at once. if
> i want to ping from another station i have to stop the
> ping that was initiated from the first host, and after
> a few seconds i can ping from another station.i've
> checked firewll and i have no ipfw rules that could
> stop icmp traffic. where should i continue my search
> and what can i do to resolv this problem. i really
> have to get ping wrking from more than one stations at
> once.
>
Hi!
I would guess, that ICMP packets do not have a port number (just a
request/response id), so that the NAT cannot distinguish multiple
ICMP packet sources (I mean: The response from the ICMP requestee
cannot be mapped back to the appropriate ICMP requester).
Hmm... I just think, that (if you have multiple ICMP requestees)
the NAT could be able to map back the ICMP requester IP by the IP
of the ICMP requestee. But I do not know, how your router works...
Maybe your computer-pool could elect an ICMP-master, who
coordinates all the ICMP traffic through the NAT.
Bye
Arne
__________________________________
Yahoo! Mail Mobile
Take Yahoo! Mail with you! Check email on your mobile phone.
http://mobile.yahoo.com/learn/mail
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
- Previous message: george roman: "icmp problem"
- Next in thread: Danil V. Gerun: "Re[2]: icmp problem"
- Reply: Danil V. Gerun: "Re[2]: icmp problem"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
