Re: [Fwd: I-D ACTION:draft-jennings-midcom-stun-results-00.txt

Justin Uberti wrote:

> Here at AOL we have found that the WRT54G is port-restricted cone in its 
> normal mode, which is what is documented by Cullen. Our other test 
> results are also mostly consistent with the document, with the exception 
> of some Linksys models, where the difference may be explained by 
> different firmware versions. We were not able to find any symmetric NATs 
> in our admittedly small sample.
> 
> Cisco PIIX       Port
> DLink DI-704P    Cone
> Linksys BEFSR41  Addr
> Linksys BEFSX41  Addr
> Linksys BEFW11S4 Port
> Linksys WRT54G   Port
> Netgear RP614    Cone
> Netgear WGR614   Cone

Thanks for the additional data. I think it would be really valuable to 
run the same tests Cullen has run against these, and include the results 
in the document.

> 
> FWIW, we have found that some Linksys routers will rewrite the IP 
> address in the STUN reply to be the nonroutable (e.g. 192.168.x.x) 
> address rather than the NAT address, causing the STUN detection to 
> classify the connectivity as "Open".

Sigh... Cullen reports in his document that he did not see this 
behavior. Its one of my regrets in stun - that we did not properly 
encrypt the address to avoid rewriting by nat. If we were to do a 
revision of stun, I would like to address this also.

> For our STUN-like protocol we have 
> the server XOR the IP address prior to returning it to prevent such 
> rewriting.
> 
> Also, we have observed from our customers this approximate breakdown in 
> market share: (obviously heavily skewed toward a US population)
> Linksys     59%
> Netgear     14%
> DLink       13%
> Belkin       5%
> Microsoft    3%
> SMC          2%
> Siemens      2%
> Zyxel        1%
> ActionTec    1%
> 3Com        <1%
> Comcast     <1%
> Dell        <1%

This is valuable data, thanks.

-Jonathan R.


-- 
Jonathan D. Rosenberg, Ph.D.                600 Lanidex Plaza
Chief Technology Officer                    Parsippany, NJ 07054-2711
dynamicsoft
[email protected]                     FAX:   (973) 952-5050
http://www.jdrosen.net                      PHONE: (973) 952-5000
http://www.dynamicsoft.com