kernel-2.6, iptables-1.2.9, pppd-2.4.2

kernel-2.6, iptables-1.2.9, pppd-2.4.2

[zhang ping]

I use linux box to share a ADSL:

  ----ADSL----PPPoE------LAN

The linux kernel is 2.6.0
The iptables is 1.2.9
The pppd is 2.4.2

pppd eth2 connect to internet, on linux box, everything is ok.

iptables -t nat -A POSTROUTING -j MASQUERADE

Within the LAN , i can surf some sites, but can't surf the others,

What is the matter??????????

Pls help me

_________________________________________________________________
享用世界上最大的电子邮件系统― MSN Hotmail。  http://www.hotmail.com  

Re: kernel-2.6, iptables-1.2.9, pppd-2.4.2

[Ted Kaczmarek]

With the limited info provided going to be difficult to even guess.
Is ip_forward enabled?

Ethereal/tcpdump are your friends.

Ted
On Wed, 2003-12-24 at 19:11, zhang ping wrote:
> I use linux box to share a ADSL:
> 
>   ----ADSL----PPPoE------LAN
> 
> The linux kernel is 2.6.0
> The iptables is 1.2.9
> The pppd is 2.4.2
> 
> pppd eth2 connect to internet, on linux box, everything is ok.
> 
> iptables -t nat -A POSTROUTING -j MASQUERADE
> 
> Within the LAN , i can surf some sites, but can't surf the others,
> 
> What is the matter??????????
> 
> Pls help me
> 
> _________________________________________________________________
> 享用世界上最大的电子邮件系统― MSN Hotmail。  http://www.hotmail.com  
> 
> 

Re: kernel-2.6, iptables-1.2.9, pppd-2.4.2

[Unknown, Alistair Tonner]

	I agree that the info is thin, but that *sounds like* a 
	probelm with tcp-ecn .... 
	
	cat /proc/sys/net/ipv4/tcp_ecn 
	if its > 0
	then
	echo "0" > /proc/sys/net/ipv4/tcp_ecn

	Alistair Tonner


On December 27, 2003 05:47 pm, Ted Kaczmarek wrote:
> With the limited info provided going to be difficult to even guess.
> Is ip_forward enabled?
>
> Ethereal/tcpdump are your friends.
>
> Ted
>
> On Wed, 2003-12-24 at 19:11, zhang ping wrote:
> > I use linux box to share a ADSL:
> >
> >   ----ADSL----PPPoE------LAN
> >
> > The linux kernel is 2.6.0
> > The iptables is 1.2.9
> > The pppd is 2.4.2
> >
> > pppd eth2 connect to internet, on linux box, everything is ok.
> >
> > iptables -t nat -A POSTROUTING -j MASQUERADE
> >
> > Within the LAN , i can surf some sites, but can't surf the others,
> >
> > What is the matter??????????
> >
> > Pls help me
> >
> > _________________________________________________________________
> > 享用世界上最大的电子邮件系统― MSN Hotmail。  http://www.hotmail.com

Re: kernel-2.6, iptables-1.2.9, pppd-2.4.2

[Antony Stone]

On Sunday 28 December 2003 2:01 pm, Alistair Tonner wrote:

> I agree that the info is thin, but that *sounds like* a
> 	probelm with tcp-ecn ....
>
> 	cat /proc/sys/net/ipv4/tcp_ecn
> 	if its > 0
> 	then
> 	echo "0" > /proc/sys/net/ipv4/tcp_ecn
>
> 	Alistair Tonner

Alternatively it could be the old MTU/MSS problem?

http://lists.netfilter.org/pipermail/netfilter/2003-November/048409.html

Antony.

> On December 27, 2003 05:47 pm, Ted Kaczmarek wrote:
> > With the limited info provided going to be difficult to even guess.
> > Is ip_forward enabled?
> >
> > Ethereal/tcpdump are your friends.
> >
> > Ted
> >
> > On Wed, 2003-12-24 at 19:11, zhang ping wrote:
> > > I use linux box to share a ADSL:
> > >
> > >   ----ADSL----PPPoE------LAN
> > >
> > > The linux kernel is 2.6.0
> > > The iptables is 1.2.9
> > > The pppd is 2.4.2
> > >
> > > pppd eth2 connect to internet, on linux box, everything is ok.
> > >
> > > iptables -t nat -A POSTROUTING -j MASQUERADE
> > >
> > > Within the LAN , i can surf some sites, but can't surf the others,
> > >
> > > What is the matter??????????
> > >
> > > Pls help me
> > >
> > > _________________________________________________________________
> > > 享用世界上最大的电子邮件系统― MSN Hotmail。  http://www.hotmail.com

-- 
Wanted: telepath.   You know where to apply.

                                                     Please reply to the list;
                                                           please don't CC me.