3 ms·
Only this tuple needs to be unique: (source ip, source port, dest ip, dest port, protocol) For protocols that don't have ports, then it is this tuple: (sourc
by eggnet 15y ago
Only this tuple needs to be unique:
(source ip, source port, dest ip, dest port, protocol)
For protocols that don't have ports, then it is this tuple:
(source ip, dest ip, protocol)
that needs to be unique.
Openbsd's pf works that way, I'd be utterly shocked if any other linux or bsd kernel-integrated nat system worked any differently.
- premchai21 15y agoI was originally thinking this would break things like IDENT, but then I remembered that they use the entire tuple (d'oh). I'll take your word for the pf behavior, and retract my bogus guess about kernel NAT. :-)