NAT2NAT

Hi There,

Is it possible to setup a NAT2NAT kinda "channel" for any software if
I have a system available that can bve accessed by direct TCP
forwarding?
I mean think of following example:
I would like to have my system, at work be accessible on a certain
port from the outside but i cannot forward a specific port to my
system as i don't have access to the router/firewall. But I thought
could establish a NAT2NAT kinda connection to my system at home. At
home i certainly can edit my router and forward a specific port to a
fixed LAN IP.
Is it clear what I'm trying to establish? Is this possible at all?
Thanks for suggestion and help!
Ron

cerr wrote:

> Is it clear what I'm trying to establish?

Yes. This is commonly knows as VPN: Virtual Private Network.

> Is this possible at all?

Easily. Check out <http://openvpn.org> and
<http://www.tinc-vpn.org>


Wolfgang

On Mar 30, 12:06*pm, cerr <ron.egg...@gmail.com> wrote:

> Is it possible to setup a NAT2NAT kinda "channel" for any software if
> I have a system available that can bve accessed by direct TCP
> forwarding?
> I mean think of following example:
> I would like to have my system, at work be accessible on a certain
> port from the outside but i cannot forward a specific port to my
> system as i don't have access to the router/firewall. But I thought
> could establish a NAT2NAT kinda connection to my system at home. At
> home i certainly can edit my router and forward a specific port to a
> fixed LAN IP.
> Is it clear what I'm trying to establish? Is this possible at all?

It's not completely clear what you mean. I think you're looking for
NAT traversal, such as with STUN. http://en.wikipedia.org/wiki/STUN

DS

On Mar 30, 11:16*pm, David Schwartz <dav...@webmaster.com> wrote:
> On Mar 30, 12:06*pm, cerr <ron.egg...@gmail.com> wrote:
>
> > Is it possible to setup a NAT2NAT kinda "channel" for any software if
> > I have a system available that can bve accessed by direct TCP
> > forwarding?
> > I mean think of following example:
> > I would like to have my system, at work be accessible on a certain
> > port from the outside but i cannot forward a specific port to my
> > system as i don't have access to the router/firewall. But I thought
> > could establish a NAT2NAT kinda connection to my system at home. At
> > home i certainly can edit my router and forward a specific port to a
> > fixed LAN IP.
> > Is it clear what I'm trying to establish? Is this possible at all?
>
> It's not completely clear what you mean. I think you're looking for
> NAT traversal, such as with STUN.http://en.wikipedia.org/wiki/STUN
>
Yes, this sounds pretty much like what I'm looking for:
"The original STUN protocol allows applications operating through a
network address translator (NAT) to discover the presence and the
specific type of NAT, and to obtain the mapped (public) IP address
(NAT address) and port number that the NAT has allocated for the
application's User Datagram Protocol (UDP) connections to remote
hosts. The protocol requires assistance from a 3rd-party network
server (STUN server) located on the opposing (public) side of the NAT,
usually the public Internet."

Again, I'm looking for a way to get a p2p client accessed from the
outside on a specific port when i don't have access to the firewall/
router to forward a certain port to a fix ip address in the LAN.

Thanks,
Ron

On Mar 30, 5:00*pm, Wolfgang Draxinger <wdraxin...@darkstargames.de>
wrote:
> cerr wrote:
> > Is it clear what I'm trying to establish?
>
> Yes. This is commonly knows as VPN: Virtual Private Network.
>
> > Is this possible at all?
>
> Easily. Check out <http://openvpn.org> and
> <http://www.tinc-vpn.org>

tinc-von would probably allow me to do so too but i believe STUN is
the solution to use in this case.

Thanks,
Ron

On Mar 31, 5:55*am, cerr <ron.egg...@gmail.com> wrote:

> Again, I'm looking for a way to get a p2p client accessed from the
> outside on a specific port when i don't have access to the firewall/
> router to forward a certain port to a fix ip address in the LAN.

Accessed by another p2p client whose code you control? Or accessed by
a p2p client whose code you have no control over?

If the former, STUN and UPnP are possible answers. If the latter, UPnP
may be the answer, but you need to look at what the p2p client is
doing to know for sure. (For example, if it has STUN support, you
definitely want STUN.)

DS