Hi!

> It's because the masq module isn't as smart as it could be. When a packet
> or fragment thereof comes in destined for the internet, the masq module
> makes the required changes to its return address and forwards it on. If the
> incoming packet on your eth0 (MTU 1500) is bigger than can go out your ppp0
> (MTU 294) then it will drop it instead of letting it it fragment more.

You are quite right, the problem is exactly that, when a package that is
greater that ppp's MTU it should be fragmented and then
masqueraded/forwarded, but it isn't, If you force the machine that is
sending the packages to send them with an MTU equal to that of the ppp
then everything goes OK becouse the packages are now coming in small
chunks.

The thing is... wich code should have fragmented those big packages? the
Masq code? the Firewall code? the Forwarding code? Well, I don't know but
seems to me that it is not the Masq code's duty :-???

Well, I've tried to make some experiments right now at home, I tried to
simulate the situation that I suffered when going out to the inet using my
three PCs and... well, even though I was using an ethernet conection with
an MTU of 1500 and then I masqueraded it though a ppp with an MTU of 296
to the web/ftp/irc/... server, all the stuff worked ok!

This really has shocked me, what happens when I connect to the inet that I
didn't reflect at home?

Manty/BestiaTester -> http://www.mantianito.ddns.org

See you in October at the Arroutada Party!
Visit our web http://www.arroutada.ddns.org

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]

Reply via email to