Re: [v6ops] draft-ietf-v6ops-ula-usage-recommendations - work or abandon?

[Fernando Gont <[e-mail]>]

On 11/13/2015 11:59 AM, Lorenzo Colitti wrote:
> On Fri, Nov 13, 2015 at 10:06 AM, Fernando Gont <[e-mail]
> <mailto:[e-mail]>> wrote:
> 
>     > The sort of application that tries to do this doesn't typically use TCP.
> 
>     You still need to guess the port numbers. And if you're able to, that's
>     a sign there's something you still need to fix (see RFC6056).
> 
> 
> The port numbers are no more a guess than the IP addresses are. Whatever
> told you the IP addresses can also tell you the port numbers. 

So: You want to talk to me, but I don't accept incoimng connections. I
want to talk to you, but you don't accept incoming connections.

You claim that it is simpler to achieve that with NATs, than with FWs.
How would that happen without relying on a third party, and without
guessing port numbers to fake e.g. a TCP simultaneous open?


-- 
Fernando Gont
SI6 Networks
e-mail: [e-mail]
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492