/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
Sigh, I hit send when I meant save earlier.
Defrag has moved from a compile option to a runtime option in later 2.2.x
kernels. I believe this includes 2.2.12 (RH 6.1) but does not include 2.2.5
(RH 6.0) please double check.
cat /proc/sys/net/ipv4/ip_always_defrag
result should be 1 or greater.
Background:
[Assume KSRC is set to linux source code directory,
in my case
KSRC="/usr/src/2.2"
but
KSRC="/usr/src/linux"
is more common
(I recommend a symlink from /usr/src/linux to the actual directory to save
problems compiling many programs).]
from $KSRC/Documentation/proc.txt
--
3.9 /proc/sys/net/ipv4 - IPV4 settings
[snip]
IP fragmentation settings
ip_always_defrag
Replaces the former Kernel-Configuration option:
CONFIG_IP_ALWAYS_DEFRAG
All incoming fragments (parts of IP packets
that arose when some host between origin and destination decided
that the packets were too large and cut them into pieces) will be
reassembled (defragmented) before being processed, even if they are
about to be forwarded.
Only say Y here if running either a firewall that is the sole link
to your network or a transparent proxy; never ever say Y here for a
normal router or host.
This is automagically enabled when enabling masquerading.
ipfrag_high_trash and ipfrag_low_trash
[sic - should be "ipfrag_high_thresh and ip_low_thresh"]
Maximum memory used to reassemble IP fragments. When
ipfrag_high_thresh bytes of memory is allocated for this purpose,
the fragment handler will toss packets until ipfrag_low_thresh is
reached.
ipfrag_time
Time in seconds to keep an IP fragment in memory.
--
Note: you'll also need/want to look at
$KSRC/Documentation/networking/ip-sysctl.txt for additional proc settings
that Alexy added for networking.
Hope this helps,
Lourdes
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
