All of lore.kernel.org
 help / color / mirror / Atom feed
From: Nigel Metheringham <Nigel.Metheringham@dev.InTechnology.co.uk>
To: Martin Josefsson <gandalf@wlug.westbo.se>
Cc: Netfilter <netfilter@lists.netfilter.org>
Subject: Re: NAT and MTU issues
Date: Mon, 22 Sep 2003 10:53:05 +0100	[thread overview]
Message-ID: <1064224385.6070.8.camel@angua.localnet> (raw)
In-Reply-To: <1064084662.28506.42.camel@tux.rsn.bth.se>

On Sat, 2003-09-20 at 20:04, Martin Josefsson wrote:
> Gah, I hoped we had fixed all these problems. Getting all the
> corner-cases right isn't as easy as one thinks when we perform multiple
> translations.

:-)

> Is the NAT-rules on the machine that has the tunnel? If they are that
> might explain a thing or two since the code looks correct for the case
> where the packets pass through and another machine down the pipe sends
> the icmp message back.

Yes - all of this is on one machine.
One interface has the effective  listening port on it, another interface
of the same box has the ipsec0 interface layered on top.

	Nigel.
-- 
[ Nigel Metheringham           Nigel.Metheringham@InTechnology.co.uk ]
[ - Comments in this message are my own and not ITO opinion/policy - ]



  reply	other threads:[~2003-09-22  9:53 UTC|newest]

Thread overview: 13+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-09-19 15:28 NAT and MTU issues Nigel Metheringham
2003-09-20  9:15 ` n00b question..... How to get details on active connections Paul Gibson
2003-09-20 16:09   ` Nox
2003-09-20 19:04 ` NAT and MTU issues Martin Josefsson
2003-09-22  9:53   ` Nigel Metheringham [this message]
2003-09-22 12:00     ` Martin Josefsson
2003-09-22 14:52       ` Nigel Metheringham
2003-09-22 15:03         ` Martin Josefsson
2003-09-22 15:08         ` Nigel Metheringham
2003-09-22 15:41           ` Martin Josefsson
2003-09-22 15:46             ` Nigel Metheringham
2003-09-22 17:06               ` Martin Josefsson
2003-09-23 12:03                 ` Nigel Metheringham

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1064224385.6070.8.camel@angua.localnet \
    --to=nigel.metheringham@dev.intechnology.co.uk \
    --cc=gandalf@wlug.westbo.se \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.