/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
[EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
>
> I have been experiencing some problems with IP masquerading.
Your problem has nothing to do with IP masquerading.
> But when I'm disconnected programs like ftp and bitchx don't realize
> that the gateway was disconnected from the internet.
There is no notification sent to a program when a router goes offline
(which is more or less what happens when you get disconnected). The
TCP/IP protocol was not written with the idea of such notifications.
Basically, a client behind the gateway just keeps sending packets, and
they don't reach their destination anymore. If the client doesn't try
to send any packets, it will never notice that the connection has been
dropped!
About the best that could happen, I think, is that your gateway (the
masq box) could drop its default route to the Internet. Then, if your
IRC or FTP client attempts to send another packet, it will get back a
"Destination Unreachable" message, basically returning "No route to
host" to the application. Then it might terminate. But, some TCP/IP
stacks are written to treat these types of errors as transient, because
sometimes they do happen in less-than-normal operation of networks.
However, if you do this, and you use an auto-dialing PPP daemon, the
removal of the route will prevent pppd from sensing outgoing traffic,
and it will not be able to auto-dial the link anymore. It's a catch-22
situation.
> After the ppp link is re-established with a new IP address the
> connections still don't timeout or disconnect on their own.
No, they won't. I suppose you could try to have your firewall rules
written dynamically, where attempts to send with outdated IP addresses
are rejected, causing connections to be dropped.
I lived with this problem for a long time. Then I got a static IP
address, and I've been much happier.
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone || Experience comes from bad judgment."
http://www.dallas.net/~fox/ || -- Life Lessons
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
