Re: [Vtun-Users] vtund using udp behind nat

[Artur R. C. <ar...@he...>]

On Wed, Sep 29, 2004 at 12:56:24PM -0700, Dale Fountain wrote:
> A stateful packet inspection firewall should handle UDP connections just
> fine. Either yours is several years old, misconfigured (or is it
> intentional?), or possibly broken. The firewall should see that a UDP
> packet is traversing outbound and then open a "crack" to allow UDP packets
> from that outbound IP address to the source port of the machine on the
> inside of the firewall. There's no knowledge of VTun's protocol needed.
Wrong. Remember, that vtun in UDP mode works in a way similar to active ftp.

Cheers
	Artur
-- 
http://42.pl/url/813 - uaktualniane: 2004.09.21