Linux Netfilter discussions
 help / color / mirror / Atom feed
From: "John A. Sullivan III" <john.sullivan@nexusmgmt.com>
To: netfilter@lists.netfilter.org
Subject: Re: Can reach some websites, can't reach others
Date: Sat, 22 May 2004 09:32:05 -0400	[thread overview]
Message-ID: <1085232725.15548.1.camel@localhost> (raw)
In-Reply-To: <200405221328.33189.Antony@Soft-Solutions.co.uk>

On Sat, 2004-05-22 at 08:28, Antony Stone wrote:
> On Saturday 22 May 2004 12:59 pm, Sven Riedel wrote:
> 
> > Hi,
> > I'm using a Linux 2.6.6 box as a masquerading firewall via dialup for a
> > local network. From the internal network I can reach some websites (e.g.
> > www.debian.org) but can't reach others (e.g. www.freshmeat.net). The
> > unreachable sites _can_ be reached from the firewall-box itself though.
> 
> This sounds like an MSS / MTU mismatch poblem.   Try doing a Google search for 
> "clamp MSS to MTU" - that should give you some pointers.
> 
> Can't offer specific advice myself since I've never experienced the problem, 
> but I've seen it here from others several times before.
> 
> Regards,
> 
> Antony.
Antony's diagnosis is the more likely problem but,  if there is an old
proxy somewhere in the path, it can produce similar results.  If the
page uses some call that the proxy does not understand, some pages may
be blocked.
-- 
John A. Sullivan III
Chief Technology Officer
Nexus Management
+1 207-985-7880
john.sullivan@nexusmgmt.com
---
If you are interested in helping to develop a GPL enterprise class
VPN/Firewall/Security device management console, please visit
http://iscs.sourceforge.net 



  reply	other threads:[~2004-05-22 13:32 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-05-22 11:59 Can reach some websites, can't reach others Sven Riedel
2004-05-22 12:28 ` Antony Stone
2004-05-22 13:32   ` John A. Sullivan III [this message]
2004-05-22 13:52     ` Antony Stone

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1085232725.15548.1.camel@localhost \
    --to=john.sullivan@nexusmgmt.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox