Hello again ! On Sat, 2010-02-13 at 16:29 +0100, Bojan Sukalo wrote: > >> iptables -t mangle -A FORWARD -i eth1 -o eth0 -p tcp --tcp-flags > >> SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu > > > > What do you want to achieve with the last rule ? > > I tried to set mss in my last rule because this type of problem > (acording to iptables man page) can happen because of bigger mss > values and fragmenting packets after that. > When I say this type of problem I mean "established tcp session but no > traffic after that" Well, in the manual page it mentions about "criminally braindead ISPs or servers". So, to make sure that is the cause, you could try the existing setup with another ISP using one of the many free dial-up connections that are generally available. If the problem persists with other ISPs, then at least you know it might be a different cause perhaps something to do with your setup. Regards, Guido -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
