| View previous topic :: View next topic |
| Author |
Message |
sonofwatt
n00b
Joined: 04 Jun 2008
Posts: 2
|
 Posted: Wed Jun 04, 2008 9:56 am Post subject: MSS clamp and Kernel Options [Solved] |
 |
|
I've setup up a home router as per the Gentoo Home Router guide (http://www.gentoo.org/doc/en/home-router-howto.xml). It worked wonderfully until I moved, got DSL, and had to install ppp. I'm experiencing problems that, from what I can tel,l is because of a poorly set MTU value: when I surf the internet through the router, some sites load, others do not. It seems to be a common problem.
However things are little more complicated than that. The recommended fix doesn't work: MSS-clamping, or restricting the MTU with the iptable. When I run commands like:
| Code: | | # iptables -t mangle -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1412 |
or
| Code: | | # iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu |
I get this error:
| Code: | | # iptables: No chain/target/match by that name |
My intuition tells me that this is probably because I didn't include something in my kernel that I was supposed to, or my iptables are screwy. I was hoping that someone could point me in the right direction. This is my current iptable setup:
| Code: | Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
REJECT udp -- anywhere anywhere udp dpt:bootps reject-with icmp-port-unreachable
REJECT udp -- anywhere anywhere udp dpt:domain reject-with icmp-port-unreachable
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
DROP tcp -- anywhere anywhere tcp dpts:0:1023
DROP udp -- anywhere anywhere udp dpts:0:1023
Chain FORWARD (policy DROP)
target prot opt source destination
DROP all -- anywhere 0.0.168.192.in-addr.arpa/16
ACCEPT all -- 0.0.168.192.in-addr.arpa/16 anywhere |
Thanks for the help.
Last edited by sonofwatt on Fri Jun 06, 2008 4:11 am; edited 1 time in total |
|
| Back to top |
|
 |
massimo
Veteran
Joined: 22 Jun 2003
Posts: 1226
|
| Posted: Wed Jun 04, 2008 12:16 pm Post subject: |
|
|
Check your kernel config for TCPMSS.
_________________
Hello 911? How are you? |
|
| Back to top |
|
|
sonofwatt
n00b
Joined: 04 Jun 2008
Posts: 2
|
| Posted: Fri Jun 06, 2008 4:12 am Post subject: Solved |
|
|
| TCPMSS wasn't in my kernel. I put it in, and now its fixed. Thanks a lot! |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Networking & Security
