Only this tuple needs to be unique: (source ip, source port, dest ip, dest port,... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

eggnet on Dec 14, 2011 | parent | context | favorite | on: Busted: BitTorrent Pirates at Sony, Universal and ...

Only this tuple needs to be unique:

(source ip, source port, dest ip, dest port, protocol)

For protocols that don't have ports, then it is this tuple:

(source ip, dest ip, protocol)

that needs to be unique.

Openbsd's pf works that way, I'd be utterly shocked if any other linux or bsd kernel-integrated nat system worked any differently.

premchai21 on Dec 14, 2011 [–]

I was originally thinking this would break things like IDENT, but then I remembered that they use the entire tuple (d'oh). I'll take your word for the pf behavior, and retract my bogus guess about kernel NAT. :-)

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact