Re: Solved: https(443) and ADSL/masquerading

2002-01-10 Thread Dani Arbel
Hi everyone, I noticed that in the last few days the question of the proper MTU for ADSL connections was raised, with some remarks about corrections/additions to the HOWTO . so: 1) We plan to rewrite the HOWTO, so we will take the remarks into consideration. 2) the current version of the howto has

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Shachar Shemesh
guy keren wrote: >On Wed, 9 Jan 2002, Ira Abramov wrote: > >3. it _could_ be that even without it, the mere fact that ira uses > 're-fragmentation' (which, as i remember, was a requirement for any > masquerading linux machine, back in 2.2 kernels - have that changed) > would have caused a

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Ira Abramov
On Wed, 9 Jan 2002, Eli Marmor wrote: > So I guess the rule that Ira and Tzahi suggested, is the solution, and Oh yeah... my rules rulez, as a rule. I rule! Kneel before Zod! |)0|\|7 /\/\355 \/\/1|O /\/\'/ /\/\4|) 5|<1llz ..Man, I work too much. -- (@-Please do NOT cc: me answers post

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Eli Marmor
guy keren wrote: > > On Wed, 9 Jan 2002, Ira Abramov wrote: > > > personally, my MTU is set at 1452, and also forced to re-fragment in the > > iptables: > > > > $IPTABLES -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu > > > > no idea if it helps, but it doesn't hurt :) >

RE: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Tzahi Fadida
09, 2002 2:41 PM To: Ira Abramov Cc: IGLU Subject: Re: Solved: https(443) and ADSL/masquerading On Wed, 9 Jan 2002, Ira Abramov wrote: > personally, my MTU is set at 1452, and also forced to re-fragment in the > iptables: > > $IPTABLES -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j T

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread guy keren
On Wed, 9 Jan 2002, Ira Abramov wrote: > personally, my MTU is set at 1452, and also forced to re-fragment in the > iptables: > > $IPTABLES -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu > > no idea if it helps, but it doesn't hurt :) lets try to guestimate why this is

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Shachar Shemesh
Ira Abramov wrote: >personally, my MTU is set at 1452, and also forced to re-fragment in the >iptables: > >$IPTABLES -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu > >no idea if it helps, but it doesn't hurt :) > > Actually, this does not refragment, but rather changes

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Ira Abramov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 8 Jan 2002, Eli Marmor wrote: > 4. WTF is MTU?! > 5. ADSL sucks! > 6. Bezeq sucks! > 7. Kvar Taramti BaAvoda (I already donated in the office). 8. Cowboy Neal personally, my MTU is set at 1452, and also forced to re-fragment in the iptable

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Eli Marmor
Noam Meltzer wrote: > when i just connected to adsl about half a year ago, i tried to work > like the manual said, but it made me problems fetching mails with pop3 > from internet zahav. when i tried to put the mtu to 1500 it solved the > problem. never changed it since then and everything works

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Noam Meltzer
when i just connected to adsl about half a year ago, i tried to work like the manual said, but it made me problems fetching mails with pop3 from internet zahav. when i tried to put the mtu to 1500 it solved the problem. never changed it since then and everything works great. Noam On Tue, 2002-01

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Malcolm Kavalsky
Oleg Goldshmidt wrote: > Eli Marmor <[EMAIL PROTECTED]> writes: > > >>After zillion things that I've tried, I decided to set the MTU to 1500, >>*CONTRARY* to what the howto says (1452). >>Surprisingly, it resolved everything, and now it's working like crazy. >> > > How interesting. My experien

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Eli Marmor
Dani Arbel wrote: > Did you change the ppp mtu to 1500 ? This is the exact step I took: I have a "pptp" command running from /etc/init.d/pptpadsl under Devil- Linux (this file was contributed recently to the CVS by me). Among other flags, this command has the following: mtu "$PPTPADSL_M

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Dani Arbel
Eli, Did you change the ppp mtu to 1500 ? can you sho the ifconfig of both configurations? did you use the adjust mtu flag in your NAT rules? Dani On Tue, 8 Jan 2002, Eli Marmor wrote: > I wrote: > > > Before I'm digging into the problem: > > > > Has anybody experienced difficulties with https c

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Eli Marmor
Oleg Goldshmidt wrote: > > Eli Marmor <[EMAIL PROTECTED]> writes: > > > After zillion things that I've tried, I decided to set the MTU to 1500, > > *CONTRARY* to what the howto says (1452). > > Surprisingly, it resolved everything, and now it's working like crazy. > > How interesting. My experi

Re: Solved: https(443) and ADSL/masquerading

2002-01-08 Thread Oleg Goldshmidt
Eli Marmor <[EMAIL PROTECTED]> writes: > After zillion things that I've tried, I decided to set the MTU to 1500, > *CONTRARY* to what the howto says (1452). > Surprisingly, it resolved everything, and now it's working like crazy. How interesting. My experience agrees with the HOWTO, e.g. I recal