﻿id,summary,reporter,owner,description,type,status,component,version,resolution,keywords,cc,guest,host
13475,UDP NAT bindings should not be closed on ICMP unreachable,ocrete,,"Currently, when VirtualBox is in NAT mode and the guest sends a UDP packet, the NAT creates a mapping for this packet, so that any incoming packet back to this port will be forwarded back. This mapping is (correctly) only based on the source port. So it is possible to ""discover"" the mapping from the guest by using STUN. The problem is that if any target returns a ICMP Unreachable then it deletes the mapping... But this is incorrect as the same maping could be used to send packets to multiple destinations. The correct solution is to only drop UDP mappings based on a timeout. The current behavior breaks RFC 5245, which is used by WebRTC.

Also, the current behavior is a ""MUST NOT"" in RFC 4787 section 9.",defect,closed,network/NAT,VirtualBox 4.3.16,fixed,,,other,other
