Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Grant Taylor <gtaylor@riverviewtech.net>
To: Mail List - Netfilter <netfilter@vger.kernel.org>
Subject: Re: Weird NAT problem
Date: Sat, 01 Nov 2008 17:52:25 -0500	[thread overview]
Message-ID: <490CDDA9.90200@riverviewtech.net> (raw)
In-Reply-To: <490CDCC2.3070202@riverviewtech.net>

(Let's try this again with out fat fingering the /Send/ button too soon.)

> Any idea what's going wrong there? Is there anything I'm overlooking 
> with my routing setup, or do I need to look for the problem on the OSX 
> side?

The first thing that comes to mind is that you may be dealing with an 
MTU / MSS issue.  Some of your connections work and some never seem to 
start, which is a classic symptom of an MTU / MSS mis-match with the 
ICMP error being filtered out along the way.

Try playing with the TCPMSS match extension and target to clamp the MSS 
to some lower values.  Try something extremely low and then start 
raising it until you start to have failures again and then back it down 
a bit.

PPPoE, despite being nice for providers, has many different problems 
that simple static IPs or even DHCP does not have.



Grant. . . .

  reply	other threads:[~2008-11-01 22:52 UTC|newest]

Thread overview: 9+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2008-11-01 22:07 Weird NAT problem Bernhard Rosenkraenzer
2008-11-01 22:48 ` Grant Taylor
2008-11-01 22:52   ` Grant Taylor [this message]
2008-11-01 23:52     ` Bernhard Rosenkraenzer
2008-11-02  0:51       ` Grant Taylor
2008-11-02 11:08     ` Pascal Hambourg
2008-11-02 18:50       ` Grant Taylor
2008-11-01 22:59   ` Bernhard Rosenkraenzer
2008-11-01 23:14     ` Grant Taylor

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=490CDDA9.90200@riverviewtech.net \
    --to=gtaylor@riverviewtech.net \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox