Newsgroup: it.tlc.gestori.fastweb
Titolo: [TEST] Verifica policy NAT dinamico

Follow-up sul mittente
----------------------
Ciao
In seguito ai cambiamenti sul sistema di autenticazione/accesso di rete
(evidente dal 5 Ottobre a molte utenze a consumo), vi sono stati anche
dei cambiamenti nelle policy di NAT dinamico.
Per questa ragione, in modo da avere un quadro globale della situazione,
chiederei a chi fosse interessato di provare l'utility Natcheck su :
==
- 
http://midcom-p2p.sourceforge.net/
==
e comunicarmi i risultati che ottiene -> le risposte a questo messaggio
sono inoltrate nella mia casella email in virtu' del follow-up.
Alcune note :
-------------
1. La versione per Windows va lanciata da una finestra di prompt dei
   comandi/dos, altrimenti non riuscite a visualizzare i risultati.
2. Dando da riga di comando natcheck -v si esegue il test in 'verbose 
   mode' = viene visualizzato l'IP di NAT con relativa porta usata verso
   l'esterno in TCP/UDP.
3. La presenza di almeno uno tra :
   ==
   - Proxy
   - Ulteriore NAT/PAT con router SW/HW
   - Firewall HW o SW (ved. ZoneAlarm, quello di XP, etc.)
   ==
   ovviamente influenza i risultati del test, per cui vi chiederei di
   indicarne l'eventuale utilizzo da parte vostra. Il discorso vale 
   quindi anche per quelle utenze business FW dietro router Cisco o GAD
   Telsey, in quanto sono dietro ad un ulteriore NAT.
 
Grazie per l'attenzione.
-- 
|Ż \/Ż | /Ż\ /Ż__/Ż__|-<|> * FAQ 2.0 ITGF it.tlc.gestori.fastweb <|
|Ż|\/|Ż|/Ż_Ż\|(__\__ \-<|> * URL  :  
http://plany.fasthosting.it
 <|
|_|  |_/_/ \_\___|___/-<|> * ----------------------------------- <|
|>- MagLev / Shanghai -<|> * URL  :  
http://www.maglev2004.cn
 ___<|

Nessun Proxy
Nessun firewall hw
Nessun Nat/Pat ulteriore
Con Norton Personal Firewall Enabled
C:\>natcheck.exe -v
server 1: 
pdos.lcs.mit.edu
 at 
18.26.4.9:9856
server 2: 
tears.lcs.mit.edu
 at 
18.26.4.77:9856
server 3: 
sure.lcs.mit.edu
 at 
18.26.4.29:9856
Local TCP port: 1483
Local UDP port: 1484
Request 1 of 20...
sendto: error 10049: Indirizzo richiesto non valido nel proprio contes
Dopo averlo disattivato
C:\>natcheck.exe -v
server 1: 
pdos.lcs.mit.edu
 at 
18.26.4.9:9856
server 2: 
tears.lcs.mit.edu
 at 
18.26.4.77:9856
server 3: 
sure.lcs.mit.edu
 at 
18.26.4.29:9856
Local TCP port: 1486
Local UDP port: 1487
Request 1 of 20...
Server 3 reports my UDP address as 
213.140.6.105:54721
Connection to server 1 complete
Server 1 reports my TCP address as 
213.140.6.105:54717
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Connection to server 2 complete
Request 2 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Request 3 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Request 4 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Request 5 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my TCP address as 
213.140.6.105:54717
Initiated TCP server 3 connection
Initiated TCP loopback connection
Request 6 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Request 7 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Request 8 of 20...
Loopback packet from 31.244.144.62 port 1488
Connection to server 3 complete
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my TCP address as 
213.140.6.105:54717
Request 9 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Request 10 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Request 11 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Request 12 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Request 13 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Request 14 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Request 15 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Request 16 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Request 17 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Request 18 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Request 19 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
Request 20 of 20...
Loopback packet from 31.244.144.62 port 1488
Server 1 reports my UDP address as 
213.140.6.105:54721
Server 2 reports my UDP address as 
213.140.6.105:54721
Server 3 reports my UDP address as 
213.140.6.105:54721
TCP RESULTS:
TCP consistent translation:           YES (GOOD for peer-to-peer)
TCP simultaneous open:                YES (GOOD for peer-to-peer)
TCP loopback translation:             NO  (BAD for P2P over Twice-NAT)
TCP unsolicited connections filtered: YES (GOOD for security)
UDP RESULTS:
UDP consistent translation:           YES (GOOD for peer-to-peer)
UDP loopback translation:             YES (GOOD for peer-to-peer)
UDP unsolicited messages filtered:    NO  (BAD for security)
Spero ti sia utile
se servono altre info non hai che da specificarlo
ciao. 

niNz ha spiegato il 09/11/2004 :

Si ma illuminaci..cosa capisci da quanto sopra.??

 Si ma illuminaci..cosa capisci da quanto sopra.??
La spiegazione tecnica e' presente sul sito da cui e' scaricabile la
utility -> le indicazioni servono per verificare la compatibilita' di
alcune applicazioni che lavorano su UDP con il NAT-dinamico delle
connessioni base FW, in seguito alla recente riorganizzazione delle
policy di rete.
Nota a margine :
----------------
Se mi fai avere un tuo indirizzo email valido, posso anche rispondere
poi alle questioni che mi hai posto in privato ;).
