icmp problem

BigBrother-{BigB3} bigbrother at bonbon.net
Fri May 13 09:45:13 PDT 2005


On Fri, 13 May 2005, Danil V. Gerun wrote:

> BB> In my NATED (ipfw+natd) lan EVERY internal host (192.168.XX) can ping
> BB> simultaneously any external host and ALL getting their proper ICMP
> BB> replies.
>
> Well, I didn't configure "ICMP NAT" for my LAN, but I'm just
> wondering: what if _some_ internal hosts start pinging one external
> host? Is each of them going to recieve all the icmp replies?..
>
>
>


As I told you If _some_ internal hosts start pinging one external host, 
everyone gets their proper answer. They are not going to receive all the 
icmp replies. Everyone receives his reply. Use

natd -v

to figure out


Here is a snip:

Out [ICMP] [ICMP] 192.168.???.130 -> 192.108.???.43 8(0) aliased to
            [ICMP] 193.92.???.26 -> 192.108.???.43 8(0)
In  [ICMP] [ICMP] 192.108.???.43 -> 193.92.???.26 0(0) aliased to
            [ICMP] 192.108.???.43 -> 192.168.???.130 0(0)



Make some experiments with

natd -v

and you will understand this.





---
Dreams have no limits!


More information about the freebsd-security mailing list