Hello
After done some more tests with ftp login working but get binary file not
directory listing working if not much output but with hughe output not ...
and that even no qos no table routing only "plain" routing wiht masquerade.
It seems that either pppd or other masquerading module does do an other
initialization...
It seems that target TCPMSS with packet size is missing and this could be
the problem because with short packets it seems to work (google page works)
but others not etc. etc.
So my question now:
How can I set the following behaviour for FORWARD queue?
149 7452 TCPMSS tcp -- any ppp0 anywhere
anywhere tcp flags:SYN,RST/SYN tcpmss match 1400:1536 TCPMSS
clamp to PMTU
(see also output below).
Greetings and thanks:
Here output of the old and new system.
############### Old system which works right #########################
gw_servirap:~# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
TCPMSS tcp -- anywhere anywhere tcp
flags:SYN,RST/SYN tcpmss match 1400:1536 TCPMSS clamp to PMTU
ACCEPT all -- 10.99.0.10 anywhere
ACCEPT all -- anywhere 10.99.0.10
ACCEPT all -- 10.99.0.200 anywhere
ACCEPT all -- anywhere 10.99.0.200
DROP all -- 10.99.0.0/24 anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
####################
gw_servirap:~# iptables -L -v -t nat
Chain PREROUTING (policy ACCEPT 1044 packets, 86531 bytes)
pkts bytes target prot opt in out source
destination
Chain POSTROUTING (policy ACCEPT 12 packets, 794 bytes)
pkts bytes target prot opt in out source
destination
164 6431 MASQUERADE all -- any eth2 anywhere
anywhere
650 60648 MASQUERADE all -- any ppp0 anywhere
anywhere
4 336 MASQUERADE all -- any eth1 anywhere
anywhere
0 0 MASQUERADE all -- any ppp0 anywhere
anywhere
0 0 MASQUERADE all -- any eth1 anywhere
anywhere
Chain OUTPUT (policy ACCEPT 36 packets, 2534 bytes)
pkts bytes target prot opt in out source
destination
####################
gw_servirap:~# iptables -L -v
Chain INPUT (policy ACCEPT 1353 packets, 101K bytes)
pkts bytes target prot opt in out source
destination
Chain FORWARD (policy ACCEPT 17917 packets, 14M bytes)
pkts bytes target prot opt in out source
destination
149 7452 TCPMSS tcp -- any ppp0 anywhere
anywhere tcp flags:SYN,RST/SYN tcpmss match 1400:1536 TCPMSS
clamp to PMTU
0 0 ACCEPT all -- any any 10.99.0.10 anywhere
0 0 ACCEPT all -- any any anywhere
10.99.0.10
2 168 ACCEPT all -- any any 10.99.0.200 anywhere
0 0 ACCEPT all -- any any anywhere
10.99.0.200
0 0 DROP all -- any any 10.99.0.0/24 anywhere
Chain OUTPUT (policy ACCEPT 1337 packets, 273K bytes)
pkts bytes target prot opt in out source
destination
############### New system which does not work right
#########################
gw_servirap_new:~# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT 0 -- 10.99.0.10 anywhere
ACCEPT 0 -- anywhere 10.99.0.10
ACCEPT 0 -- 10.99.0.200 anywhere
ACCEPT 0 -- anywhere 10.99.0.200
DROP 0 -- 10.99.0.0/24 anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
####################
gw_servirap_new:~# iptables -L -v -t nat
Chain PREROUTING (policy ACCEPT 684 packets, 69286 bytes)
pkts bytes target prot opt in out source
destination
Chain POSTROUTING (policy ACCEPT 21 packets, 1434 bytes)
pkts bytes target prot opt in out source
destination
105 4733 MASQUERADE 0 -- any eth2 anywhere
anywhere
416 48259 MASQUERADE 0 -- any ppp0 anywhere
anywhere
2 168 MASQUERADE 0 -- any eth1 anywhere
anywhere
0 0 MASQUERADE 0 -- any ppp0 anywhere
anywhere
0 0 MASQUERADE 0 -- any eth1 anywhere
anywhere
Chain OUTPUT (policy ACCEPT 69 packets, 4748 bytes)
pkts bytes target prot opt in out source
destination
####################
gw_servirap_new:~# iptables -L -v
Chain INPUT (policy ACCEPT 2025 packets, 705K bytes)
pkts bytes target prot opt in out source
destination
Chain FORWARD (policy ACCEPT 2630 packets, 505K bytes)
pkts bytes target prot opt in out source
destination
0 0 ACCEPT 0 -- any any 10.99.0.10 anywhere
0 0 ACCEPT 0 -- any any anywhere
10.99.0.10
0 0 ACCEPT 0 -- any any 10.99.0.200 anywhere
0 0 ACCEPT 0 -- any any anywhere
10.99.0.200
0 0 DROP 0 -- any any 10.99.0.0/24 anywhere
Chain OUTPUT (policy ACCEPT 1609 packets, 152K bytes)
pkts bytes target prot opt in out source
destination
_______________________________________________
Voyage-linux mailing list
[email protected]
http://list.voyage.hk/mailman/listinfo/voyage-linux
