Re: weird iptables behaviour

On 24 Nov 2006 00:48:55 GMT, Fabio <nsafve_DELETE_ME_@xxxxxx> wrote:

I've got a strange problem with IP Masquerade:
PC1 is connected to internet and PC2 uses PC1
as the gateway.
From PC2 i can ping and even traceroute any URL
(for example ping and traceroute www.wikipedia.org
works great) but i can open very few web pages.
I only can see there 3 sites:
www.mozilla.org www.beppegrillo.it www.google.com
but I can't open for example www.yahoo.com and much more.
More than that is I can use skype from PC2, so I absolutely
don't have a clue about what to do.

Would it be you're not clamping MTU? I have ('egress' is called from
FORWARD chain, MAX_MSS="1380" here):

# clamp MTU for new TCP connections to world
if [ -n "$MAX_MSS" ]
then
iptables -A egress -p tcp --tcp-flags SYN,RST SYN \
-j TCPMSS --set-mss $MAX_MSS
else
iptables -A egress -p tcp --tcp-flags SYN,RST SYN \
-j TCPMSS --clamp-mss-to-pmtu
fi

Grant.
--
http://bugsplatter.mine.nu/
.

Relevant Pages