topic Re: Dynamic NAT IP & PORT with STUN in General Topics

Dynamic NAT IP & PORT with STUN

David7660 — Tue, 27 Nov 2018 09:31:07 GMT

Hello,

Is anyone already configured it ?

We want to use STUN but the NAT seems to be a problem.

David,

Re: Dynamic NAT IP & PORT with STUN

BPry — Tue, 27 Nov 2018 18:28:52 GMT

@David7660,

This is how most people have their browsing traffic nat'd. Because the firewall keeps all of the traffic together in a session, STUN traffic should not be an issue.

This is also how I've configured my firewalls, and none have issues with Hangouts or other messaging apps because of it.

Re: Dynamic NAT IP & PORT with STUN

David7660 — Wed, 28 Nov 2018 14:02:40 GMT

@BPry

I thought the same thing.

But when we test it, we never receive the bindResponse. I don't know why.

My rules is

LAN to EXT with STUN application to any port to the URLs stun.l.google.com, stun1.l.google.com, stun2.l.google.com, stun3.l.google.com, stun4.l.google.com

Re: Dynamic NAT IP & PORT with STUN

OtakarKlier — Wed, 28 Nov 2018 20:55:28 GMT

Hello,

Are there any drop or denies in the unified logs? Also is it picking up on the application STUN?

Please advise,

Re: Dynamic NAT IP & PORT with STUN

David7660 — Thu, 29 Nov 2018 12:57:16 GMT

Hello @OtakarKlier

Yes I see my packet going through my rules with the stun application on the google-meet port 19302 but 0 received packet.