Re: [expert] IP Masquerading, The ABCs of

[Stephen F. Bosch]

Charles Curley wrote:
> 
> -> Ultimately the ISP has to block these packets at their routers, or they
> -> get into trouble, so it's not a huge problem -- but all you need is for
> -> two people on the same subnet to make the same mistake, and you've got
> -> trouble.
> 
> No, read the extract from the RFC elsewhere in this thread. If the ISP
> sees any packets addressed on the private network, then the RFC has been
> violated.

I posted that extract -- and I wasn't saying you're not violating the
RFC if your private packets go out onto the local subnet... it's just
that the damage that can be done is limited if the ISP's routers are
properly configured (that is, to discard packets with private address
ranges).

-Stephen-