From: "Mark E. Donaldson" <markee@bandwidthco.com>
To: 'zhang ping' <dqzhangp@hotmail.com>, netfilter@lists.netfilter.org
Subject: RE: iptables-1.2.9, kernel-2.6.0, pppd-2.4.2
Date: Wed, 31 Dec 2003 15:03:03 -0800 [thread overview]
Message-ID: <200312312302.hBVN2qdU012874@server5.bandwidthco.com> (raw)
In-Reply-To: <BAY2-F33Hh2wLCVYl4m0003f0bf@hotmail.com>
Nothing is the matter. You're packets destined to (or coming from) zaobao
are taking one route, and you're packets to kernel are taking a different
route. The difference is, the packets to kernel are going through a router
that supports an MTU of less than 1500. Thus, fragmentation is required.
However, a router somewhere along this path more than likely contains an ACL
that drops ICMP Type 3 Code 4 Fragmentation Required but DF set) packets.
Consequently, your system is never notified of the need to reduce the MTU,
and all packets are dropped. By reducing your MTU to 1300, you have
circumvented the need for fragmentation, and traffic flow to Kernel goes
undisturbed and uninterrupted.
-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org] On Behalf Of zhang ping
Sent: Tuesday, December 30, 2003 11:38 PM
To: netfilter@lists.netfilter.org
Subject: iptables-1.2.9, kernel-2.6.0, pppd-2.4.2
----adsl----linuxbox----lan
pppd-2.4.2 (use kernel mode pppoe)
iptables-1.2.9
kernel-2.6.0
when I visit www.zaobao.com at lan, it is ok, but I cant visit
www.kernel.org, so qi guai.
when i set mtu as 1300 at lan, everthins is ok, i can visit all sites.
what is the matter, anybody help me?
_________________________________________________________________
享用世界上最大的电子邮件系统― MSN Hotmail。 http://www.hotmail.com
prev parent reply other threads:[~2003-12-31 23:03 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-12-31 7:37 iptables-1.2.9, kernel-2.6.0, pppd-2.4.2 zhang ping
2003-12-31 12:03 ` Antony Stone
2003-12-31 23:03 ` Mark E. Donaldson [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200312312302.hBVN2qdU012874@server5.bandwidthco.com \
--to=markee@bandwidthco.com \
--cc=dqzhangp@hotmail.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox