* [LARTC] HTTP only works on second try from doublely NAT'ed windows box
@ 2001-01-12 3:31 Dan
2001-01-12 14:43 ` bert
` (3 more replies)
0 siblings, 4 replies; 5+ messages in thread
From: Dan @ 2001-01-12 3:31 UTC (permalink / raw)
To: lartc
<PRE>If this is a FAQ, may I be shot on site.
Problem:
-------
Every windows box on my network has to hit refresh once before a web site
will come up. It's as if the first try it doesn't have any gateway at all,
but the second try works. However, ping's always work flawlessly, so I
assume this is an Internet explorer or TCP/HTTP traffic problem.
Here's my setup:
---------------
Internet
|
|
DSL Router (64.x.x.130 external, and 10.0.0.250 internal)
|
|
Linux Box (10.0.0.251 internal/mapped to external 64.x.x.131 by DSL router
NAT)
|
|
Windows98 (10.0.0.122 internal - NAT'ed to 64.x.x.131 by Linux Box & DSL
router before reaching Internet)
The Linux Box uses the router as it's gateway (of course) and I have
configured the DSL router to use NAT to translate 10.0.0.251 to
64.x.x.131. This works fine.
Similarly, I have configured the Windows98 box to use Linux as it's
gateway, and Linux uses NAT to translate 10.0.0.122 into 10.0.0.251 -
which is then translated into 64.x.x.131 before it goes out to the Internet).
If I tell the Windows98 box to use 10.0.0.250 as it's gateway, then
everything works perfectly. Any tips?
And yes, there are reasons why I have it configured this way. (e.g., there
are 3 linux servers that each have an internal/external mapping done by the
dsl router).
Dan Browning, Cyclone Computer Systems, <A HREF="mailto:danb@cyclonecomputers.com">danb@cyclonecomputers.com</A>
</PRE>
^ permalink raw reply [flat|nested] 5+ messages in thread* [LARTC] HTTP only works on second try from doublely NAT'ed windows box
2001-01-12 3:31 [LARTC] HTTP only works on second try from doublely NAT'ed windows box Dan
@ 2001-01-12 14:43 ` bert
2001-02-02 4:00 ` [LARTC] HTTP only works on second try from doublely NAT'ed Dan
` (2 subsequent siblings)
3 siblings, 0 replies; 5+ messages in thread
From: bert @ 2001-01-12 14:43 UTC (permalink / raw)
To: lartc
<PRE>On Thu, Jan 11, 2001 at 07:31:57PM -0800, Dan B wrote:
><i> If this is a FAQ, may I be shot on site.
</I>
Well :-)
><i> Here's my setup:
</I>><i> ---------------
</I>><i> Internet
</I>><i> |
</I>><i> |
</I>><i> DSL Router (64.x.x.130 external, and 10.0.0.250 internal)
</I>><i> |
</I>><i> |
</I>><i> Linux Box (10.0.0.251 internal/mapped to external 64.x.x.131 by DSL router
</I>><i> NAT)
</I>><i> |
</I>><i> |
</I>><i> Windows98 (10.0.0.122 internal - NAT'ed to 64.x.x.131 by Linux Box & DSL
</I>><i> router before reaching Internet)
</I>
Are the DSL Router, the Linux Box and the Windows 98 machines all on a
single subnet, of interface? In that case the Linux box may be sending out
ICMP Redirects. Linux machines might react instantly to those redirects,
Windows only on the second try?
Use the great tool tcpdump of ethereal to find out what is exactly being
sent over the wire.
Regards,
bert hubert
--
PowerDNS Versatile DNS Services
Trilab The Technology People
'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet
</PRE>
^ permalink raw reply [flat|nested] 5+ messages in thread* [LARTC] HTTP only works on second try from doublely NAT'ed
2001-01-12 3:31 [LARTC] HTTP only works on second try from doublely NAT'ed windows box Dan
2001-01-12 14:43 ` bert
@ 2001-02-02 4:00 ` Dan
2001-02-10 4:52 ` Dan
2001-02-10 13:52 ` [LARTC] HTTP only works on second try from doublely NAT'ed windows box bert
3 siblings, 0 replies; 5+ messages in thread
From: Dan @ 2001-02-02 4:00 UTC (permalink / raw)
To: lartc
<PRE>><i> > Here's my setup:
</I>><i> > ---------------
</I>><i> > Internet
</I>><i> > |
</I>><i> > |
</I>><i> > DSL Router (64.x.x.130 external, and 10.0.0.250 internal)
</I>><i> > |
</I>><i> > |
</I>><i> > Linux Box (10.0.0.251 internal/mapped to external 64.x.x.131 by DSL
</I>><i> router
</I>><i> > NAT)
</I>><i> > |
</I>><i> > |
</I>><i> > Windows98 (10.0.0.122 internal - NAT'ed to 64.x.x.131 by Linux Box & DSL
</I>><i> > router before reaching Internet)
</I>><i>
</I>><i>Are the DSL Router, the Linux Box and the Windows 98 machines all on a
</I>><i>single subnet, of interface? In that case the Linux box may be sending out
</I>><i>ICMP Redirects. Linux machines might react instantly to those redirects,
</I>><i>Windows only on the second try?
</I>><i>
</I>><i>Use the great tool tcpdump of ethereal to find out what is exactly being
</I>><i>sent over the wire.
</I>><i>
</I>><i>Regards,
</I>><i>
</I>><i>bert hubert
</I>
It's been a few weeks for me to think about my problem, and I think I
finally figured out what you meant by what you said, Bert. I think my
problem is the linux box is trying to NAT between two interfaces even
though they are on the same subnet. (duh! tcp/ip 101).
So I'm going to try changing the Linux box to 10.0.0.251/255.255.255.248,
and the windows98 box to 10.0.0.122/255.255.255.128, and see if the NAT
will work correctly after that.
Thanks, again!
-Dan
</PRE>
^ permalink raw reply [flat|nested] 5+ messages in thread
* [LARTC] HTTP only works on second try from doublely NAT'ed
2001-01-12 3:31 [LARTC] HTTP only works on second try from doublely NAT'ed windows box Dan
2001-01-12 14:43 ` bert
2001-02-02 4:00 ` [LARTC] HTTP only works on second try from doublely NAT'ed Dan
@ 2001-02-10 4:52 ` Dan
2001-02-10 13:52 ` [LARTC] HTTP only works on second try from doublely NAT'ed windows box bert
3 siblings, 0 replies; 5+ messages in thread
From: Dan @ 2001-02-10 4:52 UTC (permalink / raw)
To: lartc
<PRE>At 08:00 PM 2/1/2001 -0800, Dan B wrote:
>><i> > Here's my setup:
</I>>><i> > ---------------
</I>>><i> > Internet
</I>>><i> > |
</I>>><i> > |
</I>>><i> > DSL Router (64.x.x.130 external, and 10.0.0.250 internal)
</I>>><i> > |
</I>>><i> > |
</I>>><i> > Linux Box (10.0.0.251 internal/mapped to external 64.x.x.131 by DSL
</I>>><i> router
</I>>><i> > NAT)
</I>>><i> > |
</I>>><i> > |
</I>>><i> > Windows98 (10.0.0.122 internal - NAT'ed to 64.x.x.131 by Linux Box & DSL
</I>>><i> > router before reaching Internet)
</I>>><i>
</I>>><i>Are the DSL Router, the Linux Box and the Windows 98 machines all on a
</I>>><i>single subnet, of interface? In that case the Linux box may be sending out
</I>>><i>ICMP Redirects. Linux machines might react instantly to those redirects,
</I>>><i>Windows only on the second try?
</I>>><i>
</I>>><i>Use the great tool tcpdump of ethereal to find out what is exactly being
</I>>><i>sent over the wire.
</I>>><i>
</I>>><i>Regards,
</I>>><i>
</I>>><i>bert hubert
</I>><i>
</I>><i>
</I>><i>It's been a few weeks for me to think about my problem, and I think I
</I>><i>finally figured out what you meant by what you said, Bert. I think my
</I>><i>problem is the linux box is trying to NAT between two interfaces even
</I>><i>though they are on the same subnet. (duh! tcp/ip 101).
</I>><i>
</I>><i>So I'm going to try changing the Linux box to 10.0.0.251/255.255.255.248,
</I>><i>and the windows98 box to 10.0.0.122/255.255.255.128, and see if the NAT
</I>><i>will work correctly after that.
</I>
That fixed it. :-) (I gotta remember that you can't NAT / route between two
computers on the same subnet very well).
Dan Browning, Cyclone Computer Systems, <A HREF="mailto:danb@cyclonecomputers.com">danb@cyclonecomputers.com</A>
</PRE>
^ permalink raw reply [flat|nested] 5+ messages in thread
* [LARTC] HTTP only works on second try from doublely NAT'ed windows box
2001-01-12 3:31 [LARTC] HTTP only works on second try from doublely NAT'ed windows box Dan
` (2 preceding siblings ...)
2001-02-10 4:52 ` Dan
@ 2001-02-10 13:52 ` bert
3 siblings, 0 replies; 5+ messages in thread
From: bert @ 2001-02-10 13:52 UTC (permalink / raw)
To: lartc
<PRE>On Fri, Feb 09, 2001 at 08:52:56PM -0800, Dan B wrote:
><i> >So I'm going to try changing the Linux box to 10.0.0.251/255.255.255.248,
</I>><i> >and the windows98 box to 10.0.0.122/255.255.255.128, and see if the NAT
</I>><i> >will work correctly after that.
</I>><i>
</I>><i> That fixed it. :-) (I gotta remember that you can't NAT / route between two
</I>><i> computers on the same subnet very well).
</I>
You can, I think, but you need to be very sure that your NAT machine isn't
sending out any ICMP Redirects.
Regards,
bert
--
<A HREF="http://www.PowerDNS.com">http://www.PowerDNS.com</A> Versatile DNS Services
Trilab The Technology People
'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet
</PRE>
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2001-02-10 13:52 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2001-01-12 3:31 [LARTC] HTTP only works on second try from doublely NAT'ed windows box Dan
2001-01-12 14:43 ` bert
2001-02-02 4:00 ` [LARTC] HTTP only works on second try from doublely NAT'ed Dan
2001-02-10 4:52 ` Dan
2001-02-10 13:52 ` [LARTC] HTTP only works on second try from doublely NAT'ed windows box bert
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox