Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Antony Stone <Antony@Soft-Solutions.co.uk>
To: netfilter@lists.netfilter.org
Subject: Re: Can reach some websites, can't reach others
Date: Sat, 22 May 2004 14:52:41 +0100	[thread overview]
Message-ID: <200405221452.41022.Antony@Soft-Solutions.co.uk> (raw)
In-Reply-To: <1085232725.15548.1.camel@localhost>

On Saturday 22 May 2004 2:32 pm, John A. Sullivan III wrote:

> On Sat, 2004-05-22 at 08:28, Antony Stone wrote:
> > On Saturday 22 May 2004 12:59 pm, Sven Riedel wrote:
> > > Hi,
> > > I'm using a Linux 2.6.6 box as a masquerading firewall via dialup for a
> > > local network. From the internal network I can reach some websites
> > > (e.g. www.debian.org) but can't reach others (e.g. www.freshmeat.net).
> > > The unreachable sites _can_ be reached from the firewall-box itself
> > > though.
> >
> > This sounds like an MSS / MTU mismatch poblem.   Try doing a Google
> > search for "clamp MSS to MTU" - that should give you some pointers.
> >
> > Can't offer specific advice myself since I've never experienced the
> > problem, but I've seen it here from others several times before.
>
> Antony's diagnosis is the more likely problem but,  if there is an old
> proxy somewhere in the path, it can produce similar results.  If the
> page uses some call that the proxy does not understand, some pages may
> be blocked.

I agree that this is a possible cause of some web pages being inaccessible, 
however I don't think it would manifest itself as described, for clients 
forwarded through the firewall, but not when the firewall itself is the 
client, (any intermediate proxy would be present in both cases) nor do I 
think (hope) that such a thing is likely with a high-traffic site such as 
freshmeat - either the site or the proxy would have been changed some time 
ago...

Regards,

Antony.

-- 
There's no such thing as bad weather - only the wrong clothes.

 - Billy Connolly

                                                     Please reply to the list;
                                                           please don't CC me.



      reply	other threads:[~2004-05-22 13:52 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-05-22 11:59 Can reach some websites, can't reach others Sven Riedel
2004-05-22 12:28 ` Antony Stone
2004-05-22 13:32   ` John A. Sullivan III
2004-05-22 13:52     ` Antony Stone [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=200405221452.41022.Antony@Soft-Solutions.co.uk \
    --to=antony@soft-solutions.co.uk \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox