Messages in this thread | | | From | Camm Maguire <> | Subject | IP Masquerade packet frag problem on 2.2.7 | Date | Wed, 14 Jul 1999 12:43:33 -0400 |
| |
Greetings! We've found a website which is accessible from our IP masquerading firewall, but not from behind that firewall. tcpdump shows a hang involving some acks with the "don't fragment" flag set. The mtu for the ppp line is autonegotiated to 1490. We're going to try 1500 shortly. But I thought this was fixed.
Here is the failing tcpdump: ============================================================================= intech4# tcpdump -i ppp0 src or dst host www.sfnb.com tcpdump: listening on ppp0 12:40:41.851803 206.228.183.5.63820 > 204.130.53.100.www: S 1335282369:1335282369(0) win 32120 <mss 1460,sackOK,timestamp 292305544 0,nop,wscale 0> (DF) 12:40:42.271822 204.130.53.100.www > 206.228.183.5.63820: S 1010816000:1010816000(0) ack 1335282370 win 32768 <mss 1460> (DF) 12:40:42.271822 206.228.183.5.63820 > 204.130.53.100.www: . ack 1 win 32120 (DF) 12:40:42.271822 206.228.183.5.63820 > 204.130.53.100.www: P 1:278(277) ack 1 win 32120 (DF) 12:40:45.261837 206.228.183.5.63820 > 204.130.53.100.www: P 1:278(277) ack 1 win 32120 (DF) 12:40:45.831822 204.130.53.100.www > 206.228.183.5.63820: . ack 278 win 32768 (DF) =============================================================================
and the succeeding one:
=============================================================================
12:41:29.652040 206.228.183.5.3821 > 204.130.53.100.www: S 1391080252:1391080252(0) win 31900 <mss 1450,sackOK,timestamp 294023648 0,nop,wscale 0> (DF) 12:41:29.832035 204.130.53.100.www > 206.228.183.5.3821: S 1016320000:1016320000(0) ack 1391080253 win 32768 <mss 1460> (DF) 12:41:29.832035 206.228.183.5.3821 > 204.130.53.100.www: . ack 1 win 31900 (DF) 12:41:29.842035 206.228.183.5.3821 > 204.130.53.100.www: P 1:475(474) ack 1 win 31900 (DF) 12:41:30.672044 204.130.53.100.www > 206.228.183.5.3821: . 1:1451(1450) ack 475 win 32768 (DF) 12:41:30.672044 206.228.183.5.3821 > 204.130.53.100.www: . ack 1451 win 31900 (DF) 12:41:30.822040 204.130.53.100.www > 206.228.183.5.3821: . 1451:2901(1450) ack 475 win 32768 (DF) 12:41:30.832040 204.130.53.100.www > 206.228.183.5.3821: . 2901:2911(10) ack 475 win 32768 (DF) 12:41:30.912053 206.228.183.5.3821 > 204.130.53.100.www: . ack 2911 win 31900 (DF) 12:41:31.192061 204.130.53.100.www > 206.228.183.5.3821: . 2911:4361(1450) ack 475 win 32768 (DF) 12:41:31.202060 204.130.53.100.www > 206.228.183.5.3821: FP 4361:4392(31) ack 475 win 32768 (DF) 12:41:31.202060 206.228.183.5.3821 > 204.130.53.100.www: . ack 4393 win 31900 (DF) 12:41:31.242059 206.228.183.5.3821 > 204.130.53.100.www: F 475:475(0) ack 4393 win 31900 (DF) 12:41:31.422055 204.130.53.100.www > 206.228.183.5.3821: . ack 476 win 32768 (DF)
=============================================================================
and the config:
=============================================================================
# # Automatically generated make config: don't edit #
# # Code maturity level options # CONFIG_EXPERIMENTAL=y
# # Processor type and features # # CONFIG_M386 is not set CONFIG_M486=y # CONFIG_M586 is not set # CONFIG_M586TSC is not set # CONFIG_M686 is not set CONFIG_X86_WP_WORKS_OK=y CONFIG_X86_INVLPG=y CONFIG_X86_BSWAP=y CONFIG_X86_POPAD_OK=y # CONFIG_MATH_EMULATION is not set # CONFIG_MTRR is not set # CONFIG_SMP is not set
# # Loadable module support # CONFIG_MODULES=y # CONFIG_MODVERSIONS is not set CONFIG_KMOD=y
# # General setup # CONFIG_NET=y CONFIG_PCI=y # CONFIG_PCI_GOBIOS is not set # CONFIG_PCI_GODIRECT is not set CONFIG_PCI_GOANY=y CONFIG_PCI_BIOS=y CONFIG_PCI_DIRECT=y CONFIG_PCI_QUIRKS=y # CONFIG_PCI_OPTIMIZE is not set CONFIG_PCI_OLD_PROC=y # CONFIG_MCA is not set # CONFIG_VISWS is not set CONFIG_SYSVIPC=y CONFIG_BSD_PROCESS_ACCT=y CONFIG_SYSCTL=y CONFIG_BINFMT_AOUT=m CONFIG_BINFMT_ELF=y CONFIG_BINFMT_MISC=m # CONFIG_BINFMT_JAVA is not set CONFIG_PARPORT=m CONFIG_PARPORT_PC=m # CONFIG_PARPORT_OTHER is not set # CONFIG_APM is not set
# # Plug and Play support # CONFIG_PNP=y CONFIG_PNP_PARPORT=m
# # Block devices # CONFIG_BLK_DEV_FD=m CONFIG_BLK_DEV_IDE=m
# # Please see Documentation/ide.txt for help/info on IDE drives # # CONFIG_BLK_DEV_HD_IDE is not set CONFIG_BLK_DEV_IDEDISK=m CONFIG_BLK_DEV_IDECD=m CONFIG_BLK_DEV_IDETAPE=m # CONFIG_BLK_DEV_IDEFLOPPY is not set # CONFIG_BLK_DEV_IDESCSI is not set CONFIG_BLK_DEV_CMD640=y # CONFIG_BLK_DEV_CMD640_ENHANCED is not set CONFIG_BLK_DEV_RZ1000=y CONFIG_BLK_DEV_IDEPCI=y CONFIG_BLK_DEV_IDEDMA=y # CONFIG_BLK_DEV_OFFBOARD is not set CONFIG_IDEDMA_AUTO=y # CONFIG_BLK_DEV_OPTI621 is not set # CONFIG_BLK_DEV_TRM290 is not set # CONFIG_BLK_DEV_NS87415 is not set # CONFIG_BLK_DEV_VIA82C586 is not set # CONFIG_BLK_DEV_CMD646 is not set # CONFIG_IDE_CHIPSETS is not set
# # Additional Block Devices # CONFIG_BLK_DEV_LOOP=m CONFIG_BLK_DEV_NBD=m CONFIG_BLK_DEV_MD=y CONFIG_MD_LINEAR=m CONFIG_MD_STRIPED=m CONFIG_MD_MIRRORING=m CONFIG_MD_RAID5=m CONFIG_BLK_DEV_RAM=y CONFIG_BLK_DEV_INITRD=y # CONFIG_BLK_DEV_XD is not set CONFIG_PARIDE_PARPORT=m # CONFIG_PARIDE is not set # CONFIG_BLK_DEV_HD is not set
# # Networking options # CONFIG_PACKET=m CONFIG_NETLINK=y CONFIG_RTNETLINK=y # CONFIG_NETLINK_DEV is not set CONFIG_FIREWALL=y # CONFIG_FILTER is not set CONFIG_UNIX=m CONFIG_INET=y # CONFIG_IP_MULTICAST is not set # CONFIG_IP_ADVANCED_ROUTER is not set # CONFIG_IP_PNP is not set CONFIG_IP_FIREWALL=y # CONFIG_IP_FIREWALL_NETLINK is not set CONFIG_IP_ALWAYS_DEFRAG=y # CONFIG_IP_TRANSPARENT_PROXY is not set CONFIG_IP_MASQUERADE=y
# # Protocol-specific masquerading support will be built as modules. # CONFIG_IP_MASQUERADE_ICMP=y
# # Protocol-specific masquerading support will be built as modules. # CONFIG_IP_MASQUERADE_MOD=y CONFIG_IP_MASQUERADE_IPAUTOFW=m CONFIG_IP_MASQUERADE_IPPORTFW=m CONFIG_IP_MASQUERADE_MFW=m # CONFIG_IP_ROUTER is not set # CONFIG_NET_IPIP is not set # CONFIG_NET_IPGRE is not set # CONFIG_IP_ALIAS is not set # CONFIG_ARPD is not set # CONFIG_SYN_COOKIES is not set
# # (it is safe to leave these untouched) # # CONFIG_INET_RARP is not set CONFIG_SKB_LARGE=y # CONFIG_IPV6 is not set
# # # CONFIG_IPX=m # CONFIG_IPX_INTERN is not set CONFIG_SPX=m # CONFIG_ATALK is not set # CONFIG_X25 is not set # CONFIG_LAPB is not set # CONFIG_BRIDGE is not set # CONFIG_LLC is not set # CONFIG_ECONET is not set CONFIG_WAN_ROUTER=m # CONFIG_NET_FASTROUTE is not set # CONFIG_NET_HW_FLOWCONTROL is not set # CONFIG_CPU_IS_SLOW is not set
# # QoS and/or fair queueing # # CONFIG_NET_SCHED is not set
# # SCSI support # CONFIG_SCSI=m
# # SCSI support type (disk, tape, CD-ROM) # CONFIG_BLK_DEV_SD=m CONFIG_CHR_DEV_ST=m # CONFIG_BLK_DEV_SR is not set # CONFIG_CHR_DEV_SG is not set
# # Some SCSI devices (e.g. CD jukebox) support multiple LUNs # CONFIG_SCSI_MULTI_LUN=y # CONFIG_SCSI_CONSTANTS is not set # CONFIG_SCSI_LOGGING is not set
# # SCSI low-level drivers # # CONFIG_SCSI_7000FASST is not set # CONFIG_SCSI_ACARD is not set # CONFIG_SCSI_AHA152X is not set # CONFIG_SCSI_AHA1542 is not set # CONFIG_SCSI_AHA1740 is not set CONFIG_SCSI_AIC7XXX=m # CONFIG_OVERRIDE_CMDS is not set # CONFIG_AIC7XXX_PROC_STATS is not set CONFIG_AIC7XXX_RESET_DELAY=5 # CONFIG_SCSI_ADVANSYS is not set # CONFIG_SCSI_IN2000 is not set # CONFIG_SCSI_AM53C974 is not set # CONFIG_SCSI_MEGARAID is not set CONFIG_SCSI_BUSLOGIC=m CONFIG_SCSI_OMIT_FLASHPOINT=y # CONFIG_SCSI_DTC3280 is not set # CONFIG_SCSI_EATA is not set # CONFIG_SCSI_EATA_DMA is not set # CONFIG_SCSI_EATA_PIO is not set # CONFIG_SCSI_FUTURE_DOMAIN is not set # CONFIG_SCSI_GDTH is not set # CONFIG_SCSI_GENERIC_NCR5380 is not set # CONFIG_SCSI_INITIO is not set # CONFIG_SCSI_INIA100 is not set # CONFIG_SCSI_PPA is not set # CONFIG_SCSI_IMM is not set # CONFIG_SCSI_NCR53C406A is not set # CONFIG_SCSI_SYM53C416 is not set # CONFIG_SCSI_NCR53C7xx is not set # CONFIG_SCSI_NCR53C8XX is not set # CONFIG_SCSI_SYM53C8XX is not set # CONFIG_SCSI_PAS16 is not set # CONFIG_SCSI_PCI2000 is not set # CONFIG_SCSI_PCI2220I is not set # CONFIG_SCSI_PSI240I is not set # CONFIG_SCSI_QLOGIC_FAS is not set # CONFIG_SCSI_QLOGIC_ISP is not set # CONFIG_SCSI_QLOGIC_FC is not set # CONFIG_SCSI_SEAGATE is not set # CONFIG_SCSI_DC390T is not set # CONFIG_SCSI_T128 is not set # CONFIG_SCSI_U14_34F is not set # CONFIG_SCSI_ULTRASTOR is not set # CONFIG_SCSI_DEBUG is not set
# # Network device support # CONFIG_NETDEVICES=y # CONFIG_ARCNET is not set CONFIG_DUMMY=m CONFIG_EQUALIZER=m # CONFIG_ETHERTAP is not set CONFIG_NET_ETHERNET=y CONFIG_NET_VENDOR_3COM=y # CONFIG_EL1 is not set # CONFIG_EL2 is not set # CONFIG_ELPLUS is not set # CONFIG_EL16 is not set CONFIG_EL3=m # CONFIG_3C515 is not set CONFIG_VORTEX=m # CONFIG_LANCE is not set CONFIG_NET_VENDOR_SMC=y CONFIG_WD80x3=m # CONFIG_ULTRA is not set # CONFIG_ULTRA32 is not set # CONFIG_SMC9194 is not set # CONFIG_NET_VENDOR_RACAL is not set # CONFIG_RTL8139 is not set # CONFIG_YELLOWFIN is not set # CONFIG_ACENIC is not set # CONFIG_NET_ISA is not set CONFIG_NET_EISA=y # CONFIG_PCNET32 is not set # CONFIG_AC3200 is not set # CONFIG_APRICOT is not set # CONFIG_CS89x0 is not set # CONFIG_DE4X5 is not set # CONFIG_DEC_ELCP is not set # CONFIG_DGRS is not set CONFIG_EEXPRESS_PRO100=m # CONFIG_LNE390 is not set # CONFIG_NE3210 is not set CONFIG_NE2K_PCI=m # CONFIG_TLAN is not set # CONFIG_VIA_RHINE is not set # CONFIG_ES3210 is not set # CONFIG_EPIC100 is not set # CONFIG_ZNET is not set # CONFIG_NET_POCKET is not set # CONFIG_FDDI is not set # CONFIG_HIPPI is not set # CONFIG_DLCI is not set CONFIG_PLIP=m CONFIG_PPP=m
# # CCP compressors for PPP are only built as modules. # CONFIG_SLIP=m CONFIG_SLIP_COMPRESSED=y CONFIG_SLIP_SMART=y # CONFIG_SLIP_MODE_SLIP6 is not set # CONFIG_NET_RADIO is not set # CONFIG_TR is not set # CONFIG_SHAPER is not set # CONFIG_HOSTESS_SV11 is not set # CONFIG_COSA is not set # CONFIG_RCPCI is not set CONFIG_WAN_DRIVERS=y CONFIG_VENDOR_SANGOMA=m CONFIG_WANPIPE_CARDS=1 # CONFIG_WANPIPE_X25 is not set # CONFIG_WANPIPE_FR is not set CONFIG_WANPIPE_PPP=y
# # Amateur Radio support # # CONFIG_HAMRADIO is not set
# # IrDA subsystem support # # CONFIG_IRDA is not set
# # ISDN subsystem # # CONFIG_ISDN is not set
# # Old CD-ROM drivers (not SCSI, not IDE) # CONFIG_CD_NO_IDESCSI=y # CONFIG_AZTCD is not set # CONFIG_GSCD is not set # CONFIG_SBPCD is not set CONFIG_MCD=m CONFIG_MCD_IRQ=11 CONFIG_MCD_BASE=300 CONFIG_MCDX=m # CONFIG_OPTCD is not set # CONFIG_CM206 is not set # CONFIG_SJCD is not set # CONFIG_ISP16_CDI is not set # CONFIG_CDU31A is not set # CONFIG_CDU535 is not set
# # Character devices # CONFIG_VT=y CONFIG_VT_CONSOLE=y CONFIG_SERIAL=m # CONFIG_SERIAL_EXTENDED is not set # CONFIG_SERIAL_NONSTANDARD is not set CONFIG_UNIX98_PTYS=y CONFIG_UNIX98_PTY_COUNT=256 CONFIG_PRINTER=m CONFIG_PRINTER_READBACK=y CONFIG_MOUSE=y
# # Mice # # CONFIG_ATIXL_BUSMOUSE is not set # CONFIG_BUSMOUSE is not set # CONFIG_MS_BUSMOUSE is not set CONFIG_PSMOUSE=y # CONFIG_82C710_MOUSE is not set # CONFIG_PC110_PAD is not set # CONFIG_QIC02_TAPE is not set CONFIG_WATCHDOG=y
# # Watchdog Cards # # CONFIG_WATCHDOG_NOWAYOUT is not set # CONFIG_WDT is not set CONFIG_SOFT_WATCHDOG=m # CONFIG_PCWATCHDOG is not set # CONFIG_ACQUIRE_WDT is not set CONFIG_NVRAM=m CONFIG_RTC=y
# # Video For Linux # # CONFIG_VIDEO_DEV is not set
# # Joystick support # # CONFIG_JOYSTICK is not set # CONFIG_DTLK is not set
# # Ftape, the floppy tape device driver # CONFIG_FTAPE=m CONFIG_ZFTAPE=m CONFIG_ZFT_DFLT_BLK_SZ=10240
# # The compressor will be built as a module only! # CONFIG_ZFT_COMPRESSOR=m CONFIG_FT_NR_BUFFERS=3 CONFIG_FT_PROC_FS=y CONFIG_FT_NORMAL_DEBUG=y # CONFIG_FT_FULL_DEBUG is not set # CONFIG_FT_NO_TRACE is not set # CONFIG_FT_NO_TRACE_AT_ALL is not set
# # Hardware configuration # # CONFIG_FT_STD_FDC is not set # CONFIG_FT_MACH2 is not set # CONFIG_FT_PROBE_FC10 is not set CONFIG_FT_ALT_FDC=y
# # Consult the manuals of your tape drive for the correct settings! # CONFIG_FT_FDC_BASE=360 CONFIG_FT_FDC_IRQ=9 CONFIG_FT_FDC_DMA=3 CONFIG_FT_FDC_THR=8 CONFIG_FT_FDC_MAX_RATE=1000
# # ONLY for DEC Alpha architectures # CONFIG_FT_ALPHA_CLOCK=0
# # Filesystems # # CONFIG_QUOTA is not set CONFIG_AUTOFS_FS=m # CONFIG_ADFS_FS is not set # CONFIG_AFFS_FS is not set # CONFIG_HFS_FS is not set CONFIG_FAT_FS=m CONFIG_MSDOS_FS=m # CONFIG_UMSDOS_FS is not set CONFIG_VFAT_FS=m CONFIG_ISO9660_FS=m CONFIG_JOLIET=y CONFIG_MINIX_FS=m # CONFIG_NTFS_FS is not set # CONFIG_HPFS_FS is not set CONFIG_PROC_FS=y CONFIG_DEVPTS_FS=y # CONFIG_QNX4FS_FS is not set CONFIG_ROMFS_FS=y CONFIG_EXT2_FS=y # CONFIG_SYSV_FS is not set # CONFIG_UFS_FS is not set
# # Network File Systems # CONFIG_CODA_FS=m CONFIG_NFS_FS=m CONFIG_NFSD=m # CONFIG_NFSD_SUN is not set CONFIG_SUNRPC=m CONFIG_LOCKD=m CONFIG_SMB_FS=m CONFIG_SMB_WIN95=y CONFIG_NCP_FS=m # CONFIG_NCPFS_PACKET_SIGNING is not set # CONFIG_NCPFS_IOCTL_LOCKING is not set CONFIG_NCPFS_STRONG=y CONFIG_NCPFS_NFS_NS=y # CONFIG_NCPFS_OS2_NS is not set CONFIG_NCPFS_MOUNT_SUBDIR=y # CONFIG_NCPFS_NLS is not set # CONFIG_NCPFS_EXTRAS is not set
# # Partition Types # # CONFIG_BSD_DISKLABEL is not set # CONFIG_MAC_PARTITION is not set # CONFIG_SMD_DISKLABEL is not set # CONFIG_SOLARIS_X86_PARTITION is not set # CONFIG_UNIXWARE_DISKLABEL is not set CONFIG_NLS=y
# # Native Language Support # CONFIG_NLS_CODEPAGE_437=m # CONFIG_NLS_CODEPAGE_737 is not set # CONFIG_NLS_CODEPAGE_775 is not set # CONFIG_NLS_CODEPAGE_850 is not set # CONFIG_NLS_CODEPAGE_852 is not set # CONFIG_NLS_CODEPAGE_855 is not set # CONFIG_NLS_CODEPAGE_857 is not set # CONFIG_NLS_CODEPAGE_860 is not set # CONFIG_NLS_CODEPAGE_861 is not set # CONFIG_NLS_CODEPAGE_862 is not set # CONFIG_NLS_CODEPAGE_863 is not set # CONFIG_NLS_CODEPAGE_864 is not set # CONFIG_NLS_CODEPAGE_865 is not set # CONFIG_NLS_CODEPAGE_866 is not set # CONFIG_NLS_CODEPAGE_869 is not set # CONFIG_NLS_CODEPAGE_874 is not set # CONFIG_NLS_ISO8859_1 is not set # CONFIG_NLS_ISO8859_2 is not set # CONFIG_NLS_ISO8859_3 is not set # CONFIG_NLS_ISO8859_4 is not set # CONFIG_NLS_ISO8859_5 is not set # CONFIG_NLS_ISO8859_6 is not set # CONFIG_NLS_ISO8859_7 is not set # CONFIG_NLS_ISO8859_8 is not set # CONFIG_NLS_ISO8859_9 is not set # CONFIG_NLS_ISO8859_15 is not set # CONFIG_NLS_KOI8_R is not set
# # Console drivers # CONFIG_VGA_CONSOLE=y CONFIG_VIDEO_SELECT=y # CONFIG_MDA_CONSOLE is not set CONFIG_FB=y CONFIG_DUMMY_CONSOLE=y # CONFIG_FB_PM2 is not set CONFIG_FB_VESA=y CONFIG_VIDEO_SELECT=y CONFIG_FB_MATROX=m # CONFIG_FB_MATROX_MILLENIUM is not set # CONFIG_FB_MATROX_MYSTIQUE is not set CONFIG_FB_MATROX_G100=y # CONFIG_FB_MATROX_MULTIHEAD is not set # CONFIG_FB_ATY is not set # CONFIG_FB_VIRTUAL is not set CONFIG_FBCON_ADVANCED=y # CONFIG_FBCON_MFB is not set # CONFIG_FBCON_CFB2 is not set # CONFIG_FBCON_CFB4 is not set CONFIG_FBCON_CFB8=m CONFIG_FBCON_CFB16=m CONFIG_FBCON_CFB24=m CONFIG_FBCON_CFB32=m # CONFIG_FBCON_AFB is not set # CONFIG_FBCON_ILBM is not set # CONFIG_FBCON_IPLAN2P2 is not set # CONFIG_FBCON_IPLAN2P4 is not set # CONFIG_FBCON_IPLAN2P8 is not set # CONFIG_FBCON_MAC is not set CONFIG_FBCON_VGA=m # CONFIG_FBCON_FONTWIDTH8_ONLY is not set # CONFIG_FBCON_FONTS is not set CONFIG_FONT_8x8=y CONFIG_FONT_8x16=y
# # Sound # CONFIG_SOUND=m # CONFIG_SOUND_ES1370 is not set # CONFIG_SOUND_ES1371 is not set # CONFIG_SOUND_SONICVIBES is not set # CONFIG_SOUND_MSNDCLAS is not set # CONFIG_SOUND_MSNDPIN is not set CONFIG_SOUND_OSS=m # CONFIG_SOUND_PAS is not set CONFIG_SOUND_SB=m CONFIG_SOUND_ADLIB=m # CONFIG_SOUND_GUS is not set # CONFIG_SOUND_MPU401 is not set # CONFIG_SOUND_PSS is not set # CONFIG_SOUND_MSS is not set # CONFIG_SOUND_SSCAPE is not set # CONFIG_SOUND_TRIX is not set # CONFIG_SOUND_MAD16 is not set # CONFIG_SOUND_WAVEFRONT is not set # CONFIG_SOUND_CS4232 is not set # CONFIG_SOUND_OPL3SA2 is not set # CONFIG_SOUND_MAUI is not set # CONFIG_SOUND_SGALAXY is not set # CONFIG_SOUND_AD1816 is not set # CONFIG_SOUND_OPL3SA1 is not set # CONFIG_SOUND_SOFTOSS is not set CONFIG_SOUND_YM3812=m CONFIG_SOUND_VMIDI=m # CONFIG_SOUND_UART6850 is not set
# # Additional low level sound drivers # # CONFIG_LOWLEVEL_SOUND is not set
# # Kernel hacking # CONFIG_MAGIC_SYSRQ=y =============================================================================
Take care,
Camm Maguire camm@enhanced.com ========================================================================== "The earth is but one country, and mankind its citizens." -- Baha'u'llah
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |