From owner-freebsd-net@FreeBSD.ORG Tue May 7 19:24:41 2013 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id E62CCD5A for ; Tue, 7 May 2013 19:24:41 +0000 (UTC) (envelope-from guru@unixarea.de) Received: from ms16-1.1blu.de (ms16-1.1blu.de [89.202.0.34]) by mx1.freebsd.org (Postfix) with ESMTP id AB380D8E for ; Tue, 7 May 2013 19:24:41 +0000 (UTC) Received: from [82.113.99.104] (helo=tiny.Sisis.de) by ms16-1.1blu.de with esmtpsa (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.69) (envelope-from ) id 1UZnV9-00032P-Oi; Tue, 07 May 2013 21:24:40 +0200 Received: from tiny.Sisis.de (localhost [127.0.0.1]) by tiny.Sisis.de (8.14.5/8.14.3) with ESMTP id r47JOagJ001355; Tue, 7 May 2013 21:24:37 +0200 (CEST) (envelope-from guru@unixarea.de) Received: (from guru@localhost) by tiny.Sisis.de (8.14.5/8.14.3/Submit) id r47JOZIm001354; Tue, 7 May 2013 21:24:35 +0200 (CEST) (envelope-from guru@unixarea.de) X-Authentication-Warning: tiny.Sisis.de: guru set sender to guru@unixarea.de using -f Date: Tue, 7 May 2013 21:24:35 +0200 From: Matthias Apitz To: Eric van Gyzen Subject: Re: ppp(8) and inbound IP connections Message-ID: <20130507192433.GA1304@tiny.Sisis.de> References: <20130507181345.GA992@tiny.Sisis.de> <51894B52.2050903@rewt.org.uk> <20130507185623.GA1115@tiny.Sisis.de> <5189534D.4020605@vangyzen.net> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <5189534D.4020605@vangyzen.net> X-Operating-System: FreeBSD 10.0-CURRENT r235646 (i386) User-Agent: Mutt/1.5.21 (2010-09-15) X-Con-Id: 51246 X-Con-U: 0-guru X-Originating-IP: 82.113.99.104 Cc: freebsd-net@freebsd.org, Joe Holden X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: Matthias Apitz List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 May 2013 19:24:42 -0000 El día Tuesday, May 07, 2013 a las 02:17:33PM -0500, Eric van Gyzen escribió: > > Ofc, the provider must NAT somehow my local addr behind some routable > > valid IP addr, in our case 82.113.99.104; without this nothing would > > come back, even when the 1st SYN was from my side; the question is, why > > they do not manage the NAT table so any SYN to 82.113.99.104 is sent to > > my ppp link; > > > > or if they do send it, and my ppp config is wrong? > > Most likely, multiple customers' local addresses are NATed to the same > routable address, so the router can't know which customer to chose for a > new incoming connection. De-NATing of incoming packets for existing > sessions is done via per-connection state-tracking, which of course > doesn't exist for a new incoming connection. That is my understanding as well, but why they claim that they do support incoming connections? matthias -- Sent from my FreeBSD netbook Matthias Apitz | - No system with backdoors like Apple/Android E-mail: guru@unixarea.de | - Never being an iSlave WWW: http://www.unixarea.de/ | - No proprietary attachments, no HTML/RTF in E-mail phone: +49-170-4527211 | - Respect for open standards