If two hosts X and Y are connected to the Internet with NAT. Both NATs are of cone-restricted type.

Now assume there's a server Z which stores all translated public addresses of X and Y. Both X and Y can get each other's translated public IP address from Z.

Now X wants to talk to Y, but X can't send a message to Y using Y's public IP because Y's NAT is cone-restricted.

But if both X and Y send a message to each other simultaneously, then their message can reach X and Y.

Can anyone tell me why this happens??

  • Is this question relevant to any real-world scenario or are we posting exam questions? – August Mar 28 '13 at 18:58

It happens because cone restricted NAT allows replies only when the traffic originates from the internal address. The requirement is that the internal address sends the original SYN, then the state will be stored in the NAT tables for a certain period of time, during which the external client (in this case behind another cone restricted NAT) can reply to them by sending packets to the mapped port/address. Since they are both performing this action, both will have the window of connectivity opened.

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.