> If the router in question is running NAT, it does need to keep track
> of UDP flows in order to match incoming UDP packets from the Internet
> with the previously-transmitted UDP packet(s) which elicited the
> response. The router needs to do this so that it will know which of
> your internal IP'd hosts it should send the packets to.

That's needed only if the incoming packet is destined for a port/IP
determined by a prior outgoing packet, such as when the incoming
packet is a response.

As far as I know, in the case of incoming NTP packets, however, they're
always to port 123, and always to the machine designated as the NTP
server. Consequently the translation of incoming packets is static, and
never needs to be subject to the dynamic tracking of a state table.

So even with NAT it should be possible to make NTP/UDP work without the
router maintaining state.

Cheers,

        - Joel
_______________________________________________
timekeepers mailing list
[email protected]
https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers

Reply via email to