My biggest issues with double NAT wasn't so much the double NAT (though gamers hate it) but with a rogue customer doing something naughty and getting their shared IP on some blacklist that is used by any number of random services. CA DMV being a prime example. Be sure to check the IP against e.g. https://www.ipvoid.com/ip-blacklist-check/ https://whatismyipaddress.com/blacklist-check
On Mon, Jan 27, 2020 at 8:02 AM Colin Stanners <cstann...@gmail.com> wrote: > A long time ago we had an issue where a banking website wouldn't function > for a specific customer on dual-NAT, but it functioned when they were put > on a public IP. I believe that it was a combination of a too-strict / > over-bureaucratic firewall at the bank's end and the NAT affecting path MTU > discovery somehow. It was too much work to troubleshoot for one residential > customer so I just put them on a public IP. > > > On Mon, Jan 27, 2020 at 9:46 AM Steve Jones <thatoneguyst...@gmail.com> > wrote: > >> We have been having issues where customers that are NAT (double NAT) are >> unable to connect to the Illinois mytax website. I assume its got to do >> with security of the site and the double NAT. Changing to a public IP >> resolves it, so its not a huge issue. We see that it appends a _/ to the >> end of it so its https://mytax.illinois.gov/_/ I dont know what that is >> about. >> >> Is there anything else a guy can do aside from going to all publics? We >> dont do CG NAT because our ratio isnt all that high and we just got more >> ARIN space that we need to clean up and provision >> -- >> AF mailing list >> AF@af.afmug.com >> http://af.afmug.com/mailman/listinfo/af_af.afmug.com >> > -- > AF mailing list > AF@af.afmug.com > http://af.afmug.com/mailman/listinfo/af_af.afmug.com >
-- AF mailing list AF@af.afmug.com http://af.afmug.com/mailman/listinfo/af_af.afmug.com
