/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
William Stearns <[EMAIL PROTECTED]> wrote:
>
> > Local socket connections from the box would still have trouble, but
> > that's just how it goes, I guess..
>
> Actually, would they? If, when an address gets removed from the
> interface list, we just cleared the masq state table of any masq
> entries using that address, it shouldn't affect local connections.
> Local connections wouldn't be using that state table.
No, they wouldn't, which is why they would still have trouble! The
connections would hang uselessly, which is what they normally do when
the interface is reconfigured with a new IP.
> When a packet comes through on an existing connection, could we check
> that the real IP it's getting masq'ed to is still active, and if not,
> clear the connection and send a reset back to the client?
Well, clearing the masq table would do nicely for packets received from
masq'd clients. But, since our IP address has changed, we won't be
receiving any more packets from the remote server anymore. What happens
on the server, depends entirely on what the ISP does with packets
destined for IP addresses that are no longer in use. I think most ISP's
just drop the packets, rather than send back resets.
If we happened to get lucky, though, and redialed and got the same IP we
had before, the masq table wouldn't need to be cleared, because we can
continue any current connections without dropping a bit!
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone || Experience comes from bad judgment."
http://www.dallas.net/~fox/ || -- Life Lessons
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
