My uneducated guess is that with this setup, every dnscache query to the DNS servers, also counts as a NAT connection.
You should move dnscache to youe leaf-router to avoid this. Also, with this setup, you have in fact double NAT. Web caching is possible using only one eth on your RH9 box. But again, these are only my 0.02 EUR cents ;) Luis Correia Bering uClibc Team Member PGP Fingerprint: BC44 D7DA 5A17 F92A CA21 9ABE DFF0 3540 2322 21F6 Key Server: http://pgp.mit.edu > -----Original Message----- > From: greg gede [mailto:[EMAIL PROTECTED] > Sent: Tuesday, February 17, 2004 2:59 AM > To: leaf-user; milis securityfocus > Subject: [leaf-user] udp masq entry and dns abuse > > Lately i'm having problem with udp masq entry in my > internet leaf-router with a lot of messages like this: > IP_MASQ:ip_masq_new(proto=UDP): could not get free > masq entry (free=36864) > > here's my network looks like : > ------------- ----------------------- > > |leaf-router| |RH9 squid & dnscachex| > to -----|eth0 eth1|---|HUB|--|eth0 eth1| > internet| | | | > ------------- ----------------------- > | > | > |switch| > | | | > subnet A - | | | > subnet B --- | | > subnet C ------| > > > everytime i stop dnscachex, the messages also stop. am > i having dns abuse from my internal network? or is it > because there are too many clients in my internal > network? how do i deal with it? > > any suggestion will be very appreciated. > > regards, > gregor > > __________________________________ > Do you Yahoo!? > Yahoo! Finance: Get your refund fast by filing online. > http://taxes.yahoo.com/filing.html > > > ------------------------------------------------------- > SF.Net is sponsored by: Speed Start Your Linux Apps Now. > Build and deploy apps & Web services for Linux with > a free DVD software kit from IBM. Click Now! > http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click > -------------------------------------------------------------- > ---------- > leaf-user mailing list: [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-user > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html > ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
