Reverse-NATing Kerberos

Josh Huber huber at alum.wpi.edu
Wed Sep 18 08:02:24 EDT 2002


Tillman Hodgson <tillman at seekingfire.com> writes:

> Are there any issues with reverse-NATing Kerberos (port 88 UDP)
> connections from the Internet to an internal Kerberos server? For
> example, is the source IP address embedded into the packet and thus
> would cause NATing problems?

I guess not, because I do this :)

There are more issues with NAT on the client side, unless you request
an addressless ticket. (kinit -A)

-- 
Josh Huber





More information about the Kerberos mailing list