![](https://seccdn.libravatar.org/avatar/a973f4cb99e27f3f197a721b2848a897.jpg?s=120&d=mm&r=g)
OK,
I didnt have this in my iptables...
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j
TCPMSS --clamp-mss-to-pmtu
Most stuff worked without it except for a handful of
sites.
I just got someone else to try it and I think thats
done it.
What is mss anyway?
Cheers for all your help :)
Tom...
--- Tom Francis
I have a suse 7.1 box set up as my router so that I can access the internet from other PC's on my network. Some websites (www.realnetworks.com, www.bahn.de, www.autoscout24.de to name but a few) are not available from masqueraded machines, whereas others are accessible. The problematic sites, however, ARE accessible from the linux machine itself.
Doing a traceroute reveals that the packets are getting most of the way, they just get lost at some routers (I think).
I have seen other instances of people with this exact problem, but have not managed to find any answers yet. It also happened exactly the same when I was using W2K as my connected machine.
More details as to my setup:
ISP - German T-DSL using pppoe Suse - 7.1 - Kernel 2.4.16 IPTables (can give the rules if needed, but its just basic masquerading that works... *normally*)
Since installing the linux machine as the router, I have tried a setting the MTU and MRU to 1492 but this made no difference. Interestingly, after setting them, I STILL get the following errors in the syslog when connecting...
pppd: Couldn't increase MTU to 1500 pppd: Couldn't increase MRU to 1500
though checking using ifconfig, the MTU *is* set correctly on both eth1(dsl connex) and ppp0 so I dont think it is an MTU issue. I also tried reducing the MTU further (to 1300) but with no affect.
The only common denominator I have seen so far from people with this problem is the use of the german T-DSL ISP.
Help? :)
Tom...
__________________________________________________ Do You Yahoo!? Everything you'll ever need on one web page from News and Sport to Email and Music Charts http://uk.my.yahoo.com
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com
__________________________________________________ Do You Yahoo!? Everything you'll ever need on one web page from News and Sport to Email and Music Charts http://uk.my.yahoo.com