problem

problem

[Mark Ryan]

I am having a problem with my firewall/router.  I am using a P166 with
32MB ram running Red hat 7.2 and an iptables firewall script.  It has 2
nics and it routes to a hub and then to 2 computers.  The firewall
script is a normal type NAT script.
 
My problem is not the script but the speed of the internet connection. 
I have noticed that after a day or 2 my internet speed gets slower.  I
do a speed test and its about 1/4 of what it should be.  When i reboot
the router, it's instantly back to 100%.

Does anyone have any ideas on what is happening?
 
Mark

Re: problem

[Arnt Karlsen]

On 25 Jan 2003 19:07:55 -0500, 
Mark Ryan <markryan@cfl.rr.com> wrote in message 
<1043539676.5018.19.camel@underworld>:

> I am having a problem with my firewall/router.  I am using a P166 with
> 32MB ram running Red hat 7.2 and an iptables firewall script.  It has
> 2 nics and it routes to a hub and then to 2 computers.  The firewall
> script is a normal type NAT script.
>  
> My problem is not the script but the speed of the internet connection.
> I have noticed that after a day or 2 my internet speed gets slower.  I
> do a speed test and its about 1/4 of what it should be.  When i reboot
> the router, it's instantly back to 100%.
> 
> Does anyone have any ideas on what is happening?
>  
> Mark

..pass.  You don't mention RH-7.2 updates.  Check 
out 'http://rhn.redhat.com/errata/rh72-errata.html',
may be something useful for you in there.

..myself, I only use RH-7.3 and -8.0 in production,
http://rhn.redhat.com/errata/rh73-errata.html and
http://rhn.redhat.com/errata/rh8-errata.html

-- 
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.

NAT of TFTP sessions

[Michael J. Tubby B.Sc. (Hons) G8TIC]

Magnus et al,

I have several Linux firewall/gateway machines dotted around the
UK and Europe which are basically RedHat 7.3 + Kernet 2.4.20
+ iptables 1.2.7a.

We have things on the inside like Cisco VoIP phones, print servers,
etc. that need to be able to TFTP code or configs in from a
server on the outside (public internet).

TFTP appears not to work and when I search google I find
information which refers to patches to "oldnat" but not to "newnat".

Is there something that I am missing? Is there a configuiration
module, helper, patch or something for iptables 1.2.7a which will
fix this?

Mike

Re: NAT of TFTP sessions

[Magnus Boden]

Hello,

It is in the patch-o-matic which has been split from 
iptables-x.x.x.tar.bz2 file. Download 
http://www.netfilter.org/files/patch-o-matic-20020825.tar.bz2
and it is in there.

Regards
Magnus

Michael J. Tubby B.Sc. (Hons) G8TIC wrote:
> Magnus et al,
> 
> I have several Linux firewall/gateway machines dotted around the
> UK and Europe which are basically RedHat 7.3 + Kernet 2.4.20
> + iptables 1.2.7a.
> 
> We have things on the inside like Cisco VoIP phones, print servers,
> etc. that need to be able to TFTP code or configs in from a
> server on the outside (public internet).
> 
> TFTP appears not to work and when I search google I find
> information which refers to patches to "oldnat" but not to "newnat".
> 
> Is there something that I am missing? Is there a configuiration
> module, helper, patch or something for iptables 1.2.7a which will
> fix this?
> 
> Mike
> 
> 
> 
> 
> 

Re: NAT of TFTP sessions

[Michael J. Tubby B.Sc. (Hons) G8TIC]

Magnus,

Thanks - found in patch-o-matic on my RH7.3 system after
some grief... when you do a:

    ./runme extra KERNEL_DIR=/usr/src/linux -2.4.20

it barfs with an error saying "ERROR: invalid arg KERNEL_DIR"
and when you don't supply a KERNEL_DIR it barfs with "missing
KERNEL_DIR", so I hacked the 'runme' bash script adding:

    KERNEL_DIR="/usr/src/linux-2.4.20"

near the top and then did:

    ./runme extra

and found it okay... patch applied cleanly to 2.4.20 and is
currently compiling... will test TFTP NAT shortly...

Thanks the for the prompt reply :-)

Mike



----- Original Message ----- 
From: "Magnus Boden" <sarek@ozaba.cx>
To: "Michael J. Tubby B.Sc. (Hons) G8TIC" <mike@thorcom.com>
Cc: <netfilter@lists.netfilter.org>
Sent: Sunday, January 26, 2003 8:31 PM
Subject: Re: NAT of TFTP sessions


> Hello,
> 
> It is in the patch-o-matic which has been split from 
> iptables-x.x.x.tar.bz2 file. Download 
> http://www.netfilter.org/files/patch-o-matic-20020825.tar.bz2
> and it is in there.
> 
> Regards
> Magnus
> 
> Michael J. Tubby B.Sc. (Hons) G8TIC wrote:
> > Magnus et al,
> > 
> > I have several Linux firewall/gateway machines dotted around the
> > UK and Europe which are basically RedHat 7.3 + Kernet 2.4.20
> > + iptables 1.2.7a.
> > 
> > We have things on the inside like Cisco VoIP phones, print servers,
> > etc. that need to be able to TFTP code or configs in from a
> > server on the outside (public internet).
> > 
> > TFTP appears not to work and when I search google I find
> > information which refers to patches to "oldnat" but not to "newnat".
> > 
> > Is there something that I am missing? Is there a configuiration
> > module, helper, patch or something for iptables 1.2.7a which will
> > fix this?
> > 
> > Mike
> > 
> > 
> > 
> > 
> > 
> 
> 
>