Messages in this thread | | | From | Paul Rusty Russell <> | Subject | Re: IP masquerade problem | Date | Wed, 27 Oct 1999 14:59:15 +1000 |
| |
In message <Pine.LNX.4.05.9910260855210.11707-100000@shodan.irccrew.org> you wr ite: > People using my IP masqueraded subnet complained to me that they > can't access some websites from their workstations. I looked into > this problem and saw something VERY strange happening. > > When I try to access one of the inaccessible websites, the value in > /proc/sys/net/ipv4/ip_always_defrag is incremented by one!
RedHat have a modified kernel, which DaveM hacked, but this should be OK. Every masq'd connection increments ip_always_defrag.
> Additionally, I know someone else is also experiencing the same > problem, but I also know that some people are using IP masq with a > similar setup without any problems.
tcpdump from the same network as the machine experiencing problems (if possible) and a list of your ipchains rules would be appreciated.
Thanks, Rusty. -- Hacking time.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |