On 2006/06/13 22:07, Nick Guenther wrote: > What is the prefered method for NAT-traversal these days? The options > I know are: > UPnP > a proxy > having the in-kernel NAT code do the work itself
Look at how /usr/sbin/ftp-proxy works with anchors - it's a nice hybrid, keeping L7 work out of the kernel, and bulk-packet-shifting out of userland. > designing protocols to assume NATs and get around them. Doesn't seem to happen too often for complicated standard protocols. More likely to get bolted-on afterwards.