Subject: Re: what is the NAT ports range for mapping one network?
To: None <firstname.lastname@example.org>
From: Jonathan A. Kollasch <email@example.com>
Date: 10/04/2005 13:14:14
On Tuesday 04 October 2005 05:33 am, Igor Sobrado wrote:
> Briefly: what is the ports range we must use for mapping one network
> to an address using NAT?
I use these two ipnat.conf lines on my NAT-router and have not noticed any
map pppoe0 172.27.72.0/24 -> 0/32 portmap tcp/udp 16384:32767 mssclamp 1440
map pppoe0 10.143.27.0/24 -> 0/32 portmap tcp/udp 32768:49152 mssclamp 1440
I avoid ports just under 65535 as these are the source ports used by outgoing
connections. In general a NAT-router won't be doing much more than packet
mangling so using registered ports is not a problem.
The real solution here is to migrate to IPv6, where the evils of NAT are