Re: Solved: https(443) and ADSL/masquerading

2002-01-10 Thread Dani Arbel
Hi everyone, I noticed that in the last few days the question of the proper MTU for ADSL connections was raised, with some remarks about corrections/additions to the HOWTO . so: 1) We plan to rewrite the HOWTO, so we will take the remarks into consideration. 2) the current version of the howto has

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Shachar Shemesh
guy keren wrote: >On Wed, 9 Jan 2002, Ira Abramov wrote: > >3. it _could_ be that even without it, the mere fact that ira uses > 're-fragmentation' (which, as i remember, was a requirement for any > masquerading linux machine, back in 2.2 kernels - have that changed) > would have caused a

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Ira Abramov
On Wed, 9 Jan 2002, Eli Marmor wrote: > So I guess the rule that Ira and Tzahi suggested, is the solution, and Oh yeah... my rules rulez, as a rule. I rule! Kneel before Zod! |)0|\|7 /\/\355 \/\/1|O /\/\'/ /\/\4|) 5|<1llz ..Man, I work too much. -- (@-Please do NOT cc: me answers post

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Eli Marmor
guy keren wrote: > > On Wed, 9 Jan 2002, Ira Abramov wrote: > > > personally, my MTU is set at 1452, and also forced to re-fragment in the > > iptables: > > > > $IPTABLES -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu > > > > no idea if it helps, but it doesn't hurt :) >

RE: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Tzahi Fadida
09, 2002 2:41 PM To: Ira Abramov Cc: IGLU Subject: Re: Solved: https(443) and ADSL/masquerading On Wed, 9 Jan 2002, Ira Abramov wrote: > personally, my MTU is set at 1452, and also forced to re-fragment in the > iptables: > > $IPTABLES -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j T

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread guy keren
On Wed, 9 Jan 2002, Ira Abramov wrote: > personally, my MTU is set at 1452, and also forced to re-fragment in the > iptables: > > $IPTABLES -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu > > no idea if it helps, but it doesn't hurt :) lets try to guestimate why this is

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Shachar Shemesh
Ira Abramov wrote: >personally, my MTU is set at 1452, and also forced to re-fragment in the >iptables: > >$IPTABLES -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu > >no idea if it helps, but it doesn't hurt :) > > Actually, this does not refragment, but rather changes

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Ira Abramov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 8 Jan 2002, Eli Marmor wrote: > 4. WTF is MTU?! > 5. ADSL sucks! > 6. Bezeq sucks! > 7. Kvar Taramti BaAvoda (I already donated in the office). 8. Cowboy Neal personally, my MTU is set at 1452, and also forced to re-fragment in the iptable

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Eli Marmor
Noam Meltzer wrote: > when i just connected to adsl about half a year ago, i tried to work > like the manual said, but it made me problems fetching mails with pop3 > from internet zahav. when i tried to put the mtu to 1500 it solved the > problem. never changed it since then and everything works

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Noam Meltzer
when i just connected to adsl about half a year ago, i tried to work like the manual said, but it made me problems fetching mails with pop3 from internet zahav. when i tried to put the mtu to 1500 it solved the problem. never changed it since then and everything works great. Noam On Tue, 2002-01

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Malcolm Kavalsky
Oleg Goldshmidt wrote: > Eli Marmor <[EMAIL PROTECTED]> writes: > > >>After zillion things that I've tried, I decided to set the MTU to 1500, >>*CONTRARY* to what the howto says (1452). >>Surprisingly, it resolved everything, and now it's working like crazy. >> > > How interesting. My experien

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Eli Marmor
Dani Arbel wrote: > Did you change the ppp mtu to 1500 ? This is the exact step I took: I have a "pptp" command running from /etc/init.d/pptpadsl under Devil- Linux (this file was contributed recently to the CVS by me). Among other flags, this command has the following: mtu "$PPTPADSL_M

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Dani Arbel
Eli, Did you change the ppp mtu to 1500 ? can you sho the ifconfig of both configurations? did you use the adjust mtu flag in your NAT rules? Dani On Tue, 8 Jan 2002, Eli Marmor wrote: > I wrote: > > > Before I'm digging into the problem: > > > > Has anybody experienced difficulties with https c

Re: Solved: https(443) and ADSL/masquerading

2002-01-09 Thread Eli Marmor
Oleg Goldshmidt wrote: > > Eli Marmor <[EMAIL PROTECTED]> writes: > > > After zillion things that I've tried, I decided to set the MTU to 1500, > > *CONTRARY* to what the howto says (1452). > > Surprisingly, it resolved everything, and now it's working like crazy. > > How interesting. My experi

Re: Solved: https(443) and ADSL/masquerading

2002-01-08 Thread Oleg Goldshmidt
Eli Marmor <[EMAIL PROTECTED]> writes: > After zillion things that I've tried, I decided to set the MTU to 1500, > *CONTRARY* to what the howto says (1452). > Surprisingly, it resolved everything, and now it's working like crazy. How interesting. My experience agrees with the HOWTO, e.g. I recal

Solved: https(443) and ADSL/masquerading

2002-01-07 Thread Eli Marmor
I wrote: > Before I'm digging into the problem: > > Has anybody experienced difficulties with https connections, using ADSL > Linux router? > > I have a Linux router that is connected on its one side to ADSL modem, > and on its second side - to a WinME machine. Everything works on the > WinME,

Re: https(443) and ADSL/masquerading

2002-01-07 Thread Eli Marmor
A correction: I found one https site that was accessed flawlessly: https://www.boutell.com/ However, most https sites could not be accessed, including the banks (e.g. https://www.umb.co.il/ and https://hb2.bankleumi.co.il/ ) and many others (even static ones, like https://www.covalent.com/ ). An

Re: https(443) and ADSL/masquerading

2002-01-07 Thread Eli Marmor
Ira Abramov wrote: > On Mon, 7 Jan 2002, Eli Marmor wrote: > > > Has anybody experienced difficulties with https connections, using ADSL > > Linux router? > > nope, works great from where I'm sitting. maybe a bad proxy config? > > is it one site or a few different ones? It occures with all th

Re: https(443) and ADSL/masquerading

2002-01-07 Thread Ira Abramov
On Mon, 7 Jan 2002, Eli Marmor wrote: > Has anybody experienced difficulties with https connections, using ADSL > Linux router? nope, works great from where I'm sitting. maybe a bad proxy config? is it one site or a few different ones? -- (@-Please do NOT cc: me answers posted also to the

https(443) and ADSL/masquerading

2002-01-07 Thread Eli Marmor
Before I'm digging into the problem: Has anybody experienced difficulties with https connections, using ADSL Linux router? I have a Linux router that is connected on its one side to ADSL modem, and on its second side - to a WinME machine. Everything works on the WinME, except for https: Whenever