/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
On Wed, 22 Dec 1999, Fuzzy Fox wrote:
> David A. Ranch <[EMAIL PROTECTED]> wrote:
> >
> > Personally, I think the best setup would be to just delete ALL
> > entries.
>
> I think this is one way to answer another user that I just replied to,
> about connections that get hung when a dynamic-IP system gets
> disconnected. It would be nice if the masq table could be cleared if
> the line goes down (in /etc/ppp/ip-down), or comes up with a different
> IP address than before (in /etc/ppp/ip-up). This would allow the client
> to receive some sort of notification that the connection's not working
> anymore.
>
> Local socket connections from the box would still have trouble, but
> that's just how it goes, I guess..
Actually, would they? If, when an address gets removed from the
interface list, we just cleared the masq state table of any masq entries
using that address, it shouldn't affect local connections. Local
connections wouldn't be using that state table.
When a packet comes through on an existing connection, could we
check that the real IP it's getting masq'ed to is still active, and if
not, clear the connection and send a reset back to the client?
Rusty - would this break things?
> Anyway, masq-dev might be the better place to post this, but I suppose
> the masq developers are all working on iptables and netfilter, now...
The algorithm would be useful on all three platforms.
Cheers,
- Bill
---------------------------------------------------------------------------
"I hear that if you win, you get a free probe by aliens."
-- Bill Coldwell, regarding the SETI@home project
(Courtesy of "Aaron J. Grier" <[EMAIL PROTECTED]>)
--------------------------------------------------------------------------
William Stearns ([EMAIL PROTECTED]). Mason, Buildkernel, named2hosts,
and ipfwadm2ipchains are at: http://www.pobox.com/~wstearns/
--------------------------------------------------------------------------
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
