Re: Major NAT Problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thursday 05 February 2004 06:54 pm, Ted Erickson wrote:
> I am somewhat new to IPTables but not to linux.  I have a major problem.
> Some background first... I have a PPoA SDSL connection with Qwest running
> at 640k/up/down.  I have a static block of 8 addresses.....I have a
> connection from the DSL modem to eth0 on my Redhat 9.0 box and I have my
> local network pluged into eth1.  The only thing running on the linux box is
> IPTables nothing else.  I turned on echo 1 > /proc/sys/net/ipv4/ip_forward
> and enabled MASQ in several different ways..... no problem.  I can surf the
> internet just fine on my local network machine but I have ONE BIG
> PROBLEM!!! I can't view a handfull of websites.  If I take the linux box
> out of the picture and throw a cheap Linksys Router on the same DSL
> connection I can see all the web sites i want.  IPTables is blocking
> something but I don't know what? I can't find any info on the web with this
> problem.  I need to fix this ASAP or I will have to go with something else,
> but I want to stay with linux.

Try adding the rule:

iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN \
   -j TCPMSS --clamp-mss-to-pmtu

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@xxxxxxxxxxxxx




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux