/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
> You can see this problem if you run out of masq ports. When the problem
> occurs, login to the masq box and rung "ipchains -M -L -n". If I'm
> right, you will see a huge connection table, filled with masqueraded
> connections. You should be able to identify the source (i.e. which
> masq'd client and which protocol [port] is being used).
David,
I haven't been able to repeat the outage, but the connection table looks
something like the following. (Not sure why I couldn't display it
before.) How many ports would be in use before running out of ports?
Does it cause a problem when ports hang around after they are no longer in
use? For example the last 3 in this list hung around for a couple of
hours. If so, what should I do about them?
[baker@localhost baker]$ /sbin/ipchains -M -L -n
IP masquerading entries
prot expire source destination ports
UDP 00:03.42 192.168.0.30 168.253.48.19 1115 (61247) -> 53
TCP 117:39.16 192.168.0.30 207.87.13.16 1117 (61249) -> 80
TCP 117:31.57 192.168.0.30 207.87.13.16 1119 (61251) -> 80
TCP 117:36.89 192.168.0.30 207.87.13.16 1118 (61250) -> 80
ICMP 00:58.32 192.168.0.20 204.146.81.99 512 (61258) -> 8
ICMP 00:44.75 192.168.0.20 209.68.147.66 512 (61256) -> 8
UDP 02:07.40 192.168.0.20 168.253.48.19 1122 (61254) -> 53
UDP 02:21.39 192.168.0.20 168.253.48.19 1123 (61255) -> 53
UDP 01:31.83 192.168.0.20 192.168.0.255 137 (61252) -> 137
UDP 01:33.03 192.168.0.20 168.253.48.19 1120 (61253) -> 53
UDP 02:34.64 192.168.0.20 168.253.48.19 1124 (61257) -> 53
TCP 05:08.04 192.168.0.10 207.87.13.16 1085 (61147) -> 80
TCP 05:08.14 192.168.0.10 207.87.13.16 1087 (61149) -> 80
TCP 05:08.10 192.168.0.10 207.87.13.16 1086 (61148) -> 80
Alan Baker
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
