Messages in this thread |  | | Date | Fri, 1 Dec 2000 22:45:34 +0000 (GMT) | From | Julian Anastasov <> | Subject | Re: 2.2.17 IP masq bug |
| |
Hello,
On Fri, 1 Dec 2000, Ben McCann wrote:
> I'm curious about how ICMP redirect is causing this problem. > Would you elaborate on how ICMP is involved?
The masq box sends ICMP redirects to the internal host when the destination host is on the same shared media, i.e. "please, go directly to the destination". When the internal host accepts these redirects it reroutes the packets directly to the destination which is on the same LAN. The packets reach the destination with saddr=10/8 because they are not masqueraded. It seems the destination does not use direct route to 10/8 and the traffic is not replied. The connection is not established when it is not masqueraded. When we block these redirects the internal hosts continue to forward the packets to the masq box without knowing the destination is directly connected.
> -Ben McCann
Regards
-- Julian Anastasov <ja@ssi.bg>
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org Please read the FAQ at http://www.tux.org/lkml/
|  |