Re: masquerading failure for at least icmp and tcp+sack on amd64

2005-09-07 Thread Marc Lehmann
On Tue, Sep 06, 2005 at 07:29:30PM +0200, Marc Lehmann <[EMAIL PROTECTED]> wrote: > Weird obervation 2: > > Some sites could be connected to with TCP. It turned out that those > sites did not support TCP SACK. Indeed, turning off SACK either on the > remote side of a connection or on the origonat

masquerading failure for at least icmp and tcp+sack on amd64

2005-09-06 Thread Marc Lehmann
Hi! I recently upgraded a 32 bit machine to a new amd64 board+cpu. I took the same kernel (2.6.13-rc7) and just recompiled it for 64 bit, plus upgraded userspace to 64 bit. Firewall config stayed the same. Problem: neither ping nor tcp was being masqueraded properly. I created the following test