Re: [Fwd: I-D ACTION:draft-jennings-midcom-stun-results-00.txt
Cullen Jennings <[email protected]>
| Newsgroups | gmane.ietf.midcom |
|---|---|
| Message-ID | <BC5D4724.32864%[email protected]> |
On 2/13/04 10:36 AM, "Jonathan Rosenberg" <[email protected]> wrote: >> >> FWIW, we have found that some Linksys routers will rewrite the IP >> address in the STUN reply to be the nonroutable (e.g. 192.168.x.x) >> address rather than the NAT address, causing the STUN detection to >> classify the connectivity as "Open". > > Sigh... Cullen reports in his document that he did not see this > behavior. Its one of my regrets in stun - that we did not properly > encrypt the address to avoid rewriting by nat. If we were to do a > revision of stun, I would like to address this also. If you can get me the version of the Linksys that did this - that would help me. Others have reported this too, I'm sure it happens, I just can't find a version that does it. There was a SIP ALG on the linksys stuff but that now defaults to off. I have some traces that show this happening on an older Speedstream ss2604 too so if someone has one of these and would be willing to send it to me, I'll swap you some other Linksys with a wireless access point.