From mboxrd@z Thu Jan 1 00:00:00 1970 From: Nigel Metheringham Subject: Re: NAT and MTU issues Date: Mon, 22 Sep 2003 15:52:04 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1064242324.6070.77.camel@angua.localnet> References: <1063985328.28941.37.camel@angua.localnet> <1064084662.28506.42.camel@tux.rsn.bth.se> <1064224385.6070.8.camel@angua.localnet> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: Martin Josefsson Cc: Netfilter On Mon, 2003-09-22 at 13:00, Martin Josefsson wrote: > Could you please apply the attached patch and reproduce it again? > It's just a small patch that enables a little debugging for this. Very odd - I am seeing ICMPs generated:- # /usr/sbin/tcpdump -n -i eth0 icmp tcpdump: listening on eth0 15:26:12.146557 192.168.50.119 > 172.16.28.33: icmp: 10.0.2.2 unreachable - need to frag (mtu 1450) [tos 0xc0] but no extra chatter in dmesg despite ensuring dmesg -n is turned up. Checking the module object file shows the extra log messages in there, so its not me doing something completely silly. Putting a iptables -t mangle -A FORWARD -p tcp --syn -j TCPMSS \ --clamp-mss-to-pmtu in appears to fix things for me. Nigel. -- [ Nigel Metheringham Nigel.Metheringham@InTechnology.co.uk ] [ - Comments in this message are my own and not ITO opinion/policy - ]