All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Andrew E. Mileski" <andrewm@isoar.ca>
To: netfilter@lists.netfilter.org
Subject: NAT and DNS/NTP servers
Date: Fri, 30 Apr 2004 22:52:14 -0400	[thread overview]
Message-ID: <409310DE.2020004@isoar.ca> (raw)

I'm observing lost packets when a gateway doing NAT also locally hosts
a server for DNS or NTP.  I believe this the result of the ambiguous
conditions that can exist when routing server-to-server packets coming
into the gateway.

I can avoid it by specifying --to-source ports in a SNAT rule for NTP,
or with DNAT and --to-destination port to force usage of the gateway's
server (which is likely the best solution).  I've not tried this on DNS
yet, but I expect it will solve the problem as well.

Is this a known situation for these protocols (and similar)?  Or am I
barking up the wrong tree?

Thanks.

-- 
Andrew E. Mileski



             reply	other threads:[~2004-05-01  2:52 UTC|newest]

Thread overview: 14+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-05-01  2:52 Andrew E. Mileski [this message]
2004-05-01  7:19 ` NAT and DNS/NTP servers Antony Stone
2004-05-01 17:42   ` Andrew E. Mileski
2004-05-01 17:49     ` Andrew E. Mileski
2004-05-01 18:05     ` Antony Stone
2004-05-01 19:51       ` Andrew E. Mileski
2004-05-01 20:00         ` Andrew E. Mileski
2004-05-01 20:21         ` Antony Stone
2004-05-01 20:48           ` Andrew E. Mileski
2004-05-01 21:07             ` Antony Stone
2004-05-01 21:42               ` Andrew E. Mileski
2004-05-01 23:17                 ` Antony Stone
  -- strict thread matches above, loose matches on Subject: below --
2004-05-02 13:49 Steve Jones
2004-05-03  0:14 ` Andrew E. Mileski

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=409310DE.2020004@isoar.ca \
    --to=andrewm@isoar.ca \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.