RFC 4787 says masquerading for UDP
- MUST have an "Endpoint-Independent Mapping" (EIM) behaviour
- should (RECOMMENDED) have an "IP address pooling" behaviour of "Paired"
Similarly, EIM behaviour is required for TCP in RFC 5382.
We want to implement this behaviour to allow for applications such as port knocking to work when required; see for example #1650.
Link: https://datatracker.ietf.org/doc/html/rfc4787#section-4.1
RFC 4787 says masquerading for UDP
Similarly, EIM behaviour is required for TCP in RFC 5382.
We want to implement this behaviour to allow for applications such as port knocking to work when required; see for example #1650.
Link: https://datatracker.ietf.org/doc/html/rfc4787#section-4.1