Home / server / Questions / 992372
In Process
user762750
Asked: 2019-11-19 19:40:37 +0800 CST

How to setup fullcone NAT on linux router?

  • 772

The current version of iptables only supports snat and dnat. Which type of NAT are they using? Fullcone NAT, Restricted Cone NAT, Port Restricted Cone NAT or Symmetric NAT? How can I tell iptables to use fullcone nat?

linux

1 Answers

  1. As RFC4787 states: "…

    STUN [RFC3489] used the terms "Full Cone", "Restricted Cone", "Port Restricted Cone", and "Symmetric" to refer to different variations of NATs applicable to UDP only. Unfortunately, this terminology has been the source of much confusion, as it has proven inadequate at describing real-life NAT behavior. This specification therefore refers to specific individual NAT behaviors instead of using the Cone/Symmetric terminology.

    …"

    How can I tell iptables to use fullcone nat?

    Taking into consideration the quote above, it makes sense instead to ask what exact behaviour are you expecting to get from Linux' NAT and are you sure it's not supporting it by default? I'll update the answer accordingly.

    • 1