[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: fragmatiation with port-forwarding (fwd)
- To: Jonathan Ben-Avraham <benavrhm(at-nospam)tkos.co.il>
- Subject: Re: fragmatiation with port-forwarding (fwd)
- From: Skliarouk Arieh <arie(at-nospam)tkos.co.il>
- Date: Tue, 28 Aug 2001 11:47:46 +0300 (IDT)
- cc: Linux-IL mailing list <linux-il(at-nospam)linux.org.il>
- Delivered-To: linux-il-linux-il@linux.org.il
- In-Reply-To: <Pine.LNX.4.21.0108281139210.8876-100000@zivan.tcltek.co.il>
- Sender: linux-il-bounce(at-nospam)cs.huji.ac.il
MTU discovery mechanism works using ICMP packets type 3
(destination-unreachable) code 4 (TCP/IP illustrated, Volume 1, page 71).
It has perfect explanation of MTU discovery mechanism on page 340-342
-A net-if -p icmp --icmp-type destination-unreachable -j ACCEPT
should solve the problem.
Note, that ping/pong packets are of different type 8
-A net-if -p ICMP --icmp-type pong -j ACCEPT
-A net-if -p ICMP --icmp-type ping -j ACCEPT
> Hi
>
> I have a web server that has recently moved to serve as port-forwarded
> beond an ipchins linux box.
>
> I suddenly noticed frgamation problems: pages from the server don't load
> if I get them fast enough. reducing the MTU to 1494 seems to solve the
> problem (and setting it back to 1500 reproduces it).
>
> While I'll probably leave those MTU settings to prevent unnecessary
> fragamantation, I can't exactly figure out how exactly the web server is
> supposed to get the Fragment packets.
>
> I can't find any trace to dropped unlogged ICMP packets on the linux box
> or the web server (and I'm pretty sure I currently log them all)
>
> Is there an explicit rule I need to add to forward the relevant ICMP
> packets to a port-forwarded connection?
> (It worked before the server was inside the NAT network, so I currently
> suspect my own settings.)
>
> Thanks
>
> --
> Tzafrir Cohen
> mailto:tzafrir@technion.ac.il
> http://www.technion.ac.il/~tzafrir
>
>
>
> =================================================================
> To unsubscribe, send mail to linux-il-request@linux.org.il with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail linux-il-request@linux.org.il
>
>
>
---
Bye, | Fax: (972)-2-6796453 | Debian
Arieh | Phone: (972)-5-4888832 | Now !!!
=================================================================
To unsubscribe, send mail to linux-il-request@linux.org.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-request@linux.org.il