[NAT] NAT question

Matt Alexander <m@netpro.to> Thu, 23 August 2001 00:14 UTC

Received: from optimus.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA26886; Wed, 22 Aug 2001 20:14:55 -0400 (EDT)
Received: from optimus.ietf.org (localhost [127.0.0.1]) by optimus.ietf.org (8.9.1a/8.9.1) with ESMTP id UAA07379; Wed, 22 Aug 2001 20:11:48 -0400 (EDT)
Received: from ietf.org (odin [132.151.1.176]) by optimus.ietf.org (8.9.1a/8.9.1) with ESMTP id UAA07356 for <nat@ns.ietf.org>; Wed, 22 Aug 2001 20:11:46 -0400 (EDT)
Received: from argon.mattalexander.com (cx1202366-c.chnd1.az.home.com [24.14.241.69]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA26840 for <nat@ietf.org>; Wed, 22 Aug 2001 20:10:27 -0400 (EDT)
Received: from localhost (m@localhost) by argon.mattalexander.com (8.11.2/8.11.2) with ESMTP id f7N0FNh09394 for <nat@ietf.org>; Wed, 22 Aug 2001 17:15:23 -0700
Date: Wed, 22 Aug 2001 17:15:23 -0700
From: Matt Alexander <m@netpro.to>
X-X-Sender: <m@argon.mattalexander.com>
To: nat@ietf.org
Message-ID: <Pine.LNX.4.33.0108221710510.9313-100000@argon.mattalexander.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
Subject: [NAT] NAT question
Sender: nat-admin@ietf.org
Errors-To: nat-admin@ietf.org
X-Mailman-Version: 1.0
Precedence: bulk
List-Id: Network Address Translation <nat.ietf.org>
X-BeenThere: nat@ietf.org

I have a question about NAT (IP Masq) that I've wondered about...
Let's say you have a setup like this:


     Internet
     --------
        |
        |
        |
     |-----|
     | NAT |
     |-----|
        |
        |
     |-----|       |------|
     | HUB |-------| Web  |
     |-----|       |Server|
        |          |------|
        |
    |--------|
    | client |
    |--------|


The NAT box is also port-forwarding any requests on the external interface
for port 80 to the Web server.  The web server and the client boxes have
private IP addresses.  Users connecting from the Internet are able to
access the Web server without any problems, but if a user sitting on the
internal network on the client box tries to access the web server, it
will do a lookup and get the external IP address of the NAT box, and the
connection to the web server will fail.  In the past I've dealt with this
situation by either putting the web server's private IP address in all the
client's hosts files, or I've setup a DNS server on the internal network.
So my question is, why does NAT fail in this situation?  Why doesn't the
client's request get redirected back to the web server?  I'm fairly
comfortable with TCP/IP so feel free to get as detailed as possible.
Thanks,
~M


_______________________________________________
nat mailing list
nat@ietf.org
http://www1.ietf.org/mailman/listinfo/nat