Re: value of /proc/sys/net/ipv4/ip_always_defrag changing due to masquerade traffic

From: Olaf Titz (olaf@bigred.inka.de)
Date: Tue Jan 11 2000 - 05:24:35 EST


> Thanks to the information provided by Julian Anastasov the problem
> was solved by setting ip_always_defrag to a high value or simply
> wait for all ip_masq-connections to time out before setting it to 1.

The obvious solution would be to set it to 1 in the firewall
initialization script _before_ any masquerading rules are established,
unless any masq connections are active (if this script is re-run).

Olaf

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sat Jan 15 2000 - 21:00:17 EST