Re: [BEHAVE] [v6ops] protocols without need for ALG ?

Owen DeLong <owen@delong.com> Fri, 31 July 2015 05:39 UTC

Return-Path: <owen@delong.com>
X-Original-To: behave@ietfa.amsl.com
Delivered-To: behave@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E66A11B3109; Thu, 30 Jul 2015 22:39:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.111
X-Spam-Level:
X-Spam-Status: No, score=-1.111 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_ALL=0.8, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9Ats7XSVnR8W; Thu, 30 Jul 2015 22:39:02 -0700 (PDT)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 49F501B30FF; Thu, 30 Jul 2015 22:39:02 -0700 (PDT)
Received: from [IPv6:2620::930:0:ae87:a3ff:fe29:7192] ([IPv6:2620:0:930:0:ae87:a3ff:fe29:7192]) (authenticated bits=0) by owen.delong.com (8.14.5/8.14.2) with ESMTP id t6V5cvBe014853 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 30 Jul 2015 22:38:57 -0700
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\))
From: Owen DeLong <owen@delong.com>
In-Reply-To: <alpine.DEB.2.02.1507310706240.11810@uplift.swm.pp.se>
Date: Thu, 30 Jul 2015 22:38:56 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <55A144E0-74BE-4A29-9A5F-782D7D660399@delong.com>
References: <20150730205806.GI1667@cisco.com> <33A0B18B-5C9D-4DC3-9E0B-736D7ECA404F@delong.com> <alpine.DEB.2.02.1507310706240.11810@uplift.swm.pp.se>
To: Mikael Abrahamsson <swmike@swm.pp.se>
X-Mailer: Apple Mail (2.2098)
Archived-At: <http://mailarchive.ietf.org/arch/msg/behave/x5FCNf_68L59kidMC8mKspdjORs>
Cc: Toerless Eckert <eckert@cisco.com>, behave@ietf.org, v6ops@ietf.org
Subject: Re: [BEHAVE] [v6ops] protocols without need for ALG ?
X-BeenThere: behave@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: mailing list of BEHAVE IETF WG <behave.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/behave>, <mailto:behave-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/behave/>
List-Post: <mailto:behave@ietf.org>
List-Help: <mailto:behave-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 31 Jul 2015 05:39:03 -0000

> On Jul 30, 2015, at 22:11 , Mikael Abrahamsson <swmike@swm.pp.se> wrote:
> 
> On Thu, 30 Jul 2015, Owen DeLong wrote:
> 
>>>  SSH/SCP - OK
>>>  syslog  - OK
>>>  TFTP    - OK ?
>> 
>> Should be OK, depending on which side is client. (client has to be the
>> private address/translated side of the connection).
> 
> There are ALGs for TFTP from multiple vendors, and I seem to remember I had problem performing TFTP download from behind a NAT, but I could be mistaken. This should be investigated further.

You might need STUN or something like that, but you shouldn’t need an ALG.

Owen