[LARTC] Strange conectivity problem on shaping box

[LARTC] Strange conectivity problem on shaping box

[Andrius Adomaitis]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello all,

first of all I would like to appoligise if this is not right topic on this 
mailling list...

Few days ago I installed new shaping/nat box with latest 2.4.20 kernel, 
iproute-20010824, and iptables 1.2.7a, which was built from netfilter cvs 
together with all extra netfilter patches. 

Since I had nice working shaping/nat box, I just transferred all iptables and 
tc setup scripts to new box, but got unexpected strange results after start.

Problem is, that I am unable to retrieve big files - e.g. telnet to remote 22 
port _shows_ ssh banner, but ssh'ing to that host fails, telnet to some 
remote 80 port _shows_ http proto error, but MsIE timeouts, retrieving 
http://ftp.lt.kernel.org/pub/linux/kernel/v2.4/linux-2.4.20.tar.bz2.sign is 
ok, but whole kernel is NOT. Also all tested hosts responds to ping....


ECN is not compiled in.
NAT is working ok, since i have communication with outside world...
CBQ and sfq shaping is done on vlan interfaces, pakets are being marked, no 
other (TOS, etc) mangling is being done.

Any ideas what could be wrong? MTU problem, etc?

Please help, because I'm just lost....

Thank You.
Andrew.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE99fJkN8/5pHh2B0YRAkR7AJ4yeuKqzbRLaZbVc+ZUkHfpeBv2wACfdizT
6x9xEy3LShVvseKlr6m7rYY=
=7SBj
-----END PGP SIGNATURE-----

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/