Re: linux-ipsec: IPSec & NAT

At 10:45 PM 10/8/98 -0400, you wrote:
>> I would appreciate your thoughts on NAT and IPSec...

Principally, NAT relies on being able to understand source and destination IP addresses and port numbers to route packets correctly. However, some applications, especially those that open reverse connections (ftp and others), requires inspection of the data stream to work correctly.

>
>The fundamental incompatibility means that you just don't get end-to-end

My knowledge of the IPSEC protocol is very limited (encryption, right?). I know a little about NAT (at least Linux masquerading). But here's a data point from Bay Networking's web site section on their Instant Internet product, an IPX/IP NAT router:

"Use the Internet as a Virtual Private Network (VPN) Communicate privately and securely across the Internet using Instant Internet's VPN support. Instant Internet allows IPSec ESP tunneling through NAT providing end-to-end encryption for sensitive office-to-office traffic when using a VPN client such as the one provided with the Bay Networks Contivity product."

I haven't had the time to explore this far enough to determine the feasability but my guess is that it is doable.

If anyone out there is interested working on an IPSEC NAT module, I can offer my limited expertise in Linux masquerading modules. But I would need some help on understanding the whole IPSEC packet exchange process.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

Anyone interested?

Al Youngwerth
alberty@apexxtech.com Received on Fri Oct 9 19:44:03 1998