nanog mailing list archives

Re: NAT devices not translating privileged ports


From: Bjørn Mork <bjorn () mork no>
Date: Thu, 10 Jun 2021 12:10:41 +0200

Fernando Gont via NANOG <nanog () nanog org> writes:

What has been reported to us is that some boxes do not translate the
src port if it's a privileged port.

IN such scenarios, NTP implementations that always use src port=123,
dst port=123 might be in trouble if there are multiple NTP clients
behind the same NAT device....

This problem used to be very common for 500/udp.  Ref
https://datatracker.ietf.org/doc/html/rfc3715#section-2.3


Bjørn


Current thread: