On Thu, Nov 30, 2006 at 04:23:13PM +0100, Florent Daigni?re (NextGen$) wrote:
> * toad <toad at amphibian.dyndns.org> [2006-11-30 02:27:03]:
> 
> > We discovered what the problem with my connection to sbc was. It was a
> > corporate NAT that rewrites the source port, but doesn't then reroute
> > packets to the new port to the original port. I have introduced a new
> > peer parameter, ignoreSourcePort, which can be set on a specific peer
> > from the dropdown box at the bottom of the darknet page. When this is
> > set, a workaround is instigated, which allows us to connect to such
> > nodes. Each of sbc's peers must set this flag on sbc. At present this
> > is purely manual; some time in the distant future auto-detection code
> > may be introduced. (bug #945).
> > 
> > Should we allow users to set this, and allowLocalAddresses, from the
> > non-advanced darknet page?
> 
> I'm against it ... because most users won't know when they ought to
> enable it ... and if they do whereas it's not needed it will break
> connectivity with "PATed" peers.

Only when their peer is behind a corporate firewall.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: 
<https://emu.freenetproject.org/pipermail/devl/attachments/20061130/f36009a7/attachment.pgp>

Reply via email to