Re: AFS over ipmasq - does it work?
bob@proulx.com (Bob Proulx) writes:
> Andrew Perrin <clists@perrin.socsci.unc.edu> [2002-10-14 14:45:43 -0400]:
>> Setting up a new machine, I'm trying to run the openafs client from behind
>> a firewall.
>>
>> 1.) Is it possible to run an openafs client via NAT? and
>
> It might be that you will need to manually create static NAT table
> entries. Or it might not be possible at all if the protocol requires
> unpleasant inbound connections.
AFS requires somewhat unpleasant inbound connections. My
understanding is that it uses UDP-based callbacks to clients when open
files change, and possibly in other circumstances, so for a quick peek
at your home directory it'll probably be fine but in a long session
the NAT will forget the pairing between the external UDP port and your
client and bad things will start to happen.
--
David Maze dmaze@debian.org http://people.debian.org/~dmaze/
"Theoretical politics is interesting. Politicking should be illegal."
-- Abra Mitchell
Reply to: