Re: Please help with my bridge/router

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thank you for your reply! I will investigate the
"mangle" line today.  But, I also tried the line
suggested by Alexandru, and it worked.
Thank you all for your generous help!
Best regards,
serge.



--- ArcosCom Linux User <linux@xxxxxxxxxxxx> wrote:

> Note: take care that it will be used into "mangle"
> table.
> 
> iptables -t mangle -A FORWARD -p tcp --tcp-flags
> SYN,RST SYN \
>                    -j TCPMSS --clamp-mss-to-pmtu
> 
> 
> El Mar, 13 de Marzo de 2007, 8:46, Alexandru Dragoi
> escribió:
> > Serge Matovic wrote:
> >> Hi to all. I'm a bit hesitant to bug you with
> this
> >> basic problem of mine, and I just hope that I'm
> not
> >> wasting your time.
> >> OK, here is the situation. I have a Linux machine
> with
> >> 4 NICs. I have configured 3 of these NICs into a
> >> bridge (br0), and the 4th NIC is connected to an
> ADSL
> >> modem (ppp0), which, in turn, is connected to
> >> Internet. This NIC is getting a DHCP address from
> my
> >> ISP. I'm using the iptable script from dranch's
> >> IP-MASQ-HOWTO. (and I tried many other ones, as
> well).
> >>
> >> Now here is the problem: When I try to go
> Internet
> >> from my Client computer (connected to one of the
> 3
> >> NICs of this bridge/router) some sites (like
> >> Google.ca) connect and work perfectly, ***BUT***
> some
> >> sites (like globaltv.com) do not load at all. But
> I
> >> know that they work fine when I connect to them
> >> without going thru my bridge/router.
> >>
> >> Does anyone have a thought on why some sites work
> and
> >> some don't?
> >>
> >> Many thanks, and best regards,
> >> serge.
> >>
> >>
> >>
> >>
> >>
>
____________________________________________________________________________________
> >> Never miss an email again!
> >> Yahoo! Toolbar alerts you the instant new Mail
> arrives.
> >>
> http://tools.search.yahoo.com/toolbar/features/mail/
> >>
> >>
> > Try:
> >
> > iptables -I FORWARD -j TCPMSS  -o ppp0 -p tcp
> --tcp-flags SYN,RST SYN
> > --clamp-mss-to-pmtu
> >
> >
> > In the man table of iptables you can see the
> explanation too.
> >
> >
> 
> 
> 
> 



 
____________________________________________________________________________________
8:00? 8:25? 8:40? Find a flick in no time 
with the Yahoo! Search movie showtime shortcut.
http://tools.search.yahoo.com/shortcuts/#news


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux