🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.dcom.modems.cable
Article #40

Re: Connecting New Machine to ATTBI

#40
From: John R Pierce
Date: Wed, 18 Sep 2002 16:42
26 lines
3043 bytes
On Wed, 18 Sep 2002 14:09:28 +0000 (UTC), David Lesher <wb8foz@panix.com>
wrote:

>Bill Pitz <remove.thisbill@nospam.svn.net> writes:
>
>>> Here's a question for the n.g.:  suppose I buy a cheap router that does
>>> NAT and connect it to an AT&T cable internet modem.  Also suppose that
>>> I connect several computers to the router and use NAT.  Do you think
>>> that AT&T will detect the presence of the multiple computers, and accuse
>>> me of theft of service?
>
>>Doubtable.  The only way they're really going to be able to tell is by
>>aggregate statistics.  (i.e. the fact that a regular, individual user
>>isn't likely to be connecting to 5 different web servers simultaneously)
>
>Note there's a paper coming out from someone senior in IETF about
>doing just that, detecting boxi inside of NAT. I have no idea how
>he does so, but know the author and would sooner try to convert the
>Pope than argue with him in his field.

Well, one thing, many (not all) NAT schemes use very obvious port numbers
for the translated connections.  For instance, if you see connections to
your server where the source ports are > 60000, you can bet money its a
Linux 2.2 system doing masquerade with ipchains...  I think the MS
Internet Connection Sharing in various late model windows systems uses
ports above 32000.
Technical Details
Message-ID: <u2bhoukhqmerdo69brh44loro7oi20bkjb@news.lmi.net>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!proxad.net!proxad.net!news-hub.cableinet.net!blueyonder!nntp2.aus1.giganews.com!nntp.giganews.com!nntp3.aus1.giganews.com!bin4.nnrp.aus1.giganews.com.POSTED!not-for-mail
References: <Xns928C932E555EEparcxmannetscapenet@13.1.103.31> <am87av$cd$1@reader1.panix.com> <3d87ab32@news.svn.net> <ama1eo$gvg$2@reader1.panix.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fa874,c69fce95781293de
X-Google-Attributes: gidfa874,public
X-Google-Thread: 113850,c69fce95781293de
X-Google-Attributes: gid113850,public
X-Google-ArrivalTime: 2002-09-18 09:42:43 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!proxad.net!proxad.net!news-hub.cableinet.net!blueyonder!nntp2.aus1.giganews.com!nntp.giganews.com!nntp3.aus1.giganews.com!bin4.nnrp.aus1.giganews.com.POSTED!not-for-mail
From: John R Pierce <spam@is.invalid>
Newsgroups: comp.dcom.modems.cable,ba.internet
Subject: Re: Connecting New Machine to ATTBI
Reply-To: dont.bother@email.is.invalid
Message-ID: <u2bhoukhqmerdo69brh44loro7oi20bkjb@news.lmi.net>
References: <Xns928C932E555EEparcxmannetscapenet@13.1.103.31> <am87av$cd$1@reader1.panix.com> <3d87ab32@news.svn.net> <ama1eo$gvg$2@reader1.panix.com>
X-Newsreader: Forte Agent 1.92/32.572
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
NNTP-Posting-Date: Wed, 18 Sep 2002 11:42:26 CDT
Organization: Giganews.Com - Premium News Outsourcing
Lines: 28
X-Trace: sv3-8wdapdqxiocs4mQ+YlUAnOHTZGWjxOHfb8XJ7QCU5dZf5CnT+MlReeVXrHYhV6Z3UAsbHFqeRfh6/DJ!qyH5MSiGIxps1MqjfthsgWPhJN+aGUPzhgMf3LuNH91yU91ZG35h5/z4oAjMWLEFuWLyf9BklCTV!ZDSgGe5AQg==
X-Complaints-To: abuse@GigaNews.Com
X-DMCA-Notifications: http://www.giganews.com/info/dmca.html
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly
X-Postfilter: 1.1
Date: Wed, 18 Sep 2002 16:42:26 GMT