/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! 
/* ALSO: Don't quote this header. It makes you look lame :-) */


On Mon, 8 Jan 2001, Brockhoven, Werner wrote:

> The ipchains howto says that in order for masquerading to work you
> have to issue echo "1" > /proc/sys/net/ipv4/ip_always_defrag,
> which I do in my firewall script.
> 
> For every new masqed connection this parameter is incremented with
> 1.  If the masqed connection is closed/timed out , this value is
> decremented with 1.

Huh?

While I haven't looked at 2.2.18 in any detail yet, it seems really
unlikely to me that the defragmentation code would be hooked into the
masquerade code in this manner.

Can anybody confirm this behaviour? Has anybody else seen it on
earlier 2.2.x kernels?

--
 John Hardin KA7OHZ   ICQ#15735746   http://www.wolfenet.com/~jhardin/
 [EMAIL PROTECTED]      pgpk -a finger://gonzo.wolfenet.com/jhardin
  768: 0x41EA94F5 - A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76 
 1024: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  It's easy to be noble with other people's money.
                                  -- John McKay, _The Welfare State:
                                     No Mercy for the Middle Class_
-----------------------------------------------------------------------
   1394 days until the Presidential Election

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- 
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to