TrinityOS - Section 16 document for network optimizations. connection, you need to edit the correct network startup scripts for your Linux distribution.
To fix the MTU issue on a standard Ethernet link to your bridged or routed DSL, Cablemodem, etc. Like above, verify that your PPP link now has the correct MTU and MTU. Save these new changes and then restart PPP. To fix the MTU issue on your PPP link, edit your /etc/ppp/options file and towards the top, add the following text on two seperate lines: "mtu 1500" and "mru 1500". Usually, Ethernet links will default to this but serial PPP links will default to 576. Now look at the lines that corresponds to your Internet connection and look for the MTU. To fix this, first see what your MTU for your Internet link is now. On the flip site, most HTTP and FTP traffic will SPEED UP! Now some users will balk at this because it can hurt some latency specific programs like TELNET and games but the impact is only slight. A perfectly good workaround is to change your Internet link's MTU to 1500. PLEASE TRY! For more details, check out this following If you are a network programmer and you think you can either fix or surmise this. Other users point their finger at the adminstrators of the problem remote sites (typically SSL connected sites, etc) and say that because they are filtering ALL FORMS of ICMP (including Type4 - Fragmentation Needed) messages in a fray of security paranoia, they are breaking the fundamental aspects of the TCP/IP protocol.īoth arguments have valid points and people from each camp continue to debate Because of this, the packets get dropped. What is believed to be happening is that the MASQ code is not properly re-writing the returning ICMP packets with the ICMP 3 Sub 4 code back to the originating MASQed computer. Though changing the MTU 1500 on the Linux box will seemingly fix the problem, the possible bug is still there. Basically, when a MASQ box connects to the Internet with an MTU of anything less than 1500, some packets will have the DF field set. Some users point their finger to the fact that IPMASQ might have problems with packets that have the DF or "Don't Fragment" bit set. As of the 2.0.38 and 2.2.9+ Linux kernels, there is a debatable BUG in the Masquerade code. The first one is VERY common and the second is very UNCOMMON. NOTE: If you can help us fill out this table, please Caldera /proc/sys/net/ipv4/ip_dynaddrħ.15 ( MTU ) - IP MASQ seems to be working fine but some sites don't work. 
Re-compile a kernel as shown above in this HOWTO. If your Linux distribution doesn't support IP MASQ out of the box, don't worry. Thank you!ħ.1 What Linux Distributions support IP Masquerading out of the box? If you can think of any useful FAQ suggestions, please send it Please clearly state the question and an appropriate answer (if you have it). Linux IP Masquerade HOWTO: Frequently Asked Questions Next Previous Contents
0 kommentar(er)
