[ previous ] [ next ] [ threads ]
 
 From:  Pieterjan Heyse <pieterjan dot heyse at scheppers dash wetteren dot be>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re[2]: [m0n0wall] Proxy ARP - Server NAT and icmp ping
 Date:  Sat, 22 Apr 2006 11:16:32 +0200
Hello Chris,

Friday, April 21, 2006, 10:29:50 PM, you wrote:

> On 4/21/06, Pieterjan Heyse
> <pieterjan dot heyse at scheppers dash wetteren dot be> wrote:
>>
>> but, when I ping 84.199.0.131 I get timeouts, this can make sense,
>> because I map the external 131 IP to 2 internal servers.
>>

> Because when using server NAT, you can only translate TCP and/or UDP.
> The other IP protocols (ICMP, GRE, ...) cannot be used in that type of
> a setup.
Ok, that explains a lot. I dod not know this.

> If you use 1:1 NAT, you can ping.  Or, if you explain why you need
> ping, maybe someone can offer an alternative (TCP or UDP ping comes to
> mind).
Indeed, I'll just use TCP ping. I was testing connectivity to our
mailserver with ICMP ping, that lead to this question.

Thanks,

PJ