Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FS#1738 - Please include Full Cone NAT package #7021

Closed
openwrt-bot opened this issue Aug 5, 2018 · 4 comments
Closed

FS#1738 - Please include Full Cone NAT package #7021

openwrt-bot opened this issue Aug 5, 2018 · 4 comments
Labels

Comments

@openwrt-bot
Copy link

acazr:

The default OpenWrt netfilter implements "Port Restricted Cone" NAT. Sometimes it's useful to have less restricted NAT.

Someone recently created a netfilter extension that implements "Full Cone" NAT. Please include it in the package feeds.

Full Cone NAT description:
https://tools.ietf.org/html/rfc3489#section-5

Netfilter extension:
https://github.com/Chion82/netfilter-full-cone-nat

OpenWrt package:

@openwrt-bot
Copy link
Author

diyism:

Fullcone NAT is a very important feature in many routers,
openWrt should include it also.

@openwrt-bot
Copy link
Author

jow-:

Use iptables SNAT rules to configure it.

@openwrt-bot
Copy link
Author

0x5e:

For most users who have switch/ps4, they need this feature sincerely. Users need a option to enable/disable. not everyone knows how to configure SNAT rules, even a software developer for me.

@openwrt-bot
Copy link
Author

marcust:

@jow- please advise on how to configure Full Cone NAT with SNAT rules in OpenWRT 19.07.2.

I spent some time on trying to figure it out, there seem to be multiple opinions on the web about that, one being that it was never really implemented in netfilter so you need these patches to actually make it work.

According to the docs you want e.g.
stun stun.1und1.de 0
STUN client version 0.97
running test number 0
Primary: Independent Mapping, Port Dependent Filter, preserves ports, no hairpin

to change to

Primary: Independent Mapping, Independent Filter, preserves ports, no hairpin

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant