Fernando Gont via NANOG <nanog@nanog.org> writes: > What has been reported to us is that some boxes do not translate the > src port if it's a privileged port. > > IN such scenarios, NTP implementations that always use src port=123, > dst port=123 might be in trouble if there are multiple NTP clients > behind the same NAT device....
This problem used to be very common for 500/udp. Ref https://datatracker.ietf.org/doc/html/rfc3715#section-2.3 Bjørn