A Technique for Counting NATted Hosts (was Re: [clug] How to prevent port forwarding)

[steve jenkin]

Kim Holburn wrote on 23/4/06 8:12 PM:
> A Technique for Counting NATted Hosts
>
> http://www.cs.columbia.edu/~smb/papers/fnat.pdf

I don't mind being shown up by Steve Belovin @ Bell Labs :-)
Using the IP Id field (or fragment field) is a novel idea - could be 
brought down by a NAT implementation that didn't just do it the easy way...

That said - it's a bit of brilliance & would work well enough to be 
commercially useful for an ISP.

> --Kim Holburn
> Security Manager, National ICT Australia Ltd.
> Ph: +61 2 61258620 M: +61 417820641  F: +61 2 6230 6121
> mailto:kim.holburn at nicta.com.au  aim://kimholburn
> skype://kholburn - PGP Public Key on request
> Cacert Root Cert: http://www.cacert.org/cacert.crt
> Aust. Spam Act: To stop receiving mail from me: reply and let me know.
>
> Use ISO 8601 dates [YYYY-MM-DD] 
> http://www.saqqara.demon.co.uk/datefmt.htm
> Democracy imposed from without is the severest form of tyranny.
>                           -- Lloyd Biggle, Jr. Analog, Apr 1961
>
>
> --linux mailing list
> linux at lists.samba.org
> https://lists.samba.org/mailman/listinfo/linux
>
>


-- 
Steve Jenkin, Info Tech, Systems and Design Specialist.
0412 786 915 (+61 412 786 915)
PO Box 48, Kippax ACT 2615, AUSTRALIA

sjenkin at canb.auug.org.au http://www.tip.net.au/~sjenkin