North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Block all servers?

  • From: Steven M. Bellovin
  • Date: Sat Oct 11 13:43:56 2003

In message <Pine.LNX.4.44.0310110741350.20543-100000@s1.yuriev.com>, Alex Yurie
v writes:
>
>> Also what about folks who need to VPN in to their office
>> (either via PPTP or IPSEC)?  How would you take care of that
>> situation?
>
>IPSEC works over NATs just fine.
>
Not in the general case, no.  See draft-aboba-nat-ipsec-04.txt if you 
can find a copy.

		--Steve Bellovin, http://www.research.att.com/~smb