[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Sheflug] lost packets



>>>>> "ross" == ross h <ross> writes:

    ross> hi all, sorry to bother you with this..... i know i've asked
    ross> in the past but can't find it in the archives!

    ross> i use pppd in demand mode and am losing the first packet
    ross> which initiates the pppd deamon?  i've looked in my firewall
    ross> script and can't find the line that's supposed to be there?
    ross> something about ipv4?

    ross> can anyone remind me what the ipchains command should be?


    ross> Erm...if it's anything to do with "first packets" I'm
    ross> guessing SYN packets?

Can you connect to the firewall machine?

The only thing that occurs to me at this time of night is that you
might be dropping SYN packets - the packets that initiate a connection.
Dumping them is an easy way to stop most people connecting to a machine. 

Look for a line similar to this

ipchains -A input -p TCP -y -j DROP

or

ipchains -A input -p TCP ! -y -j ACCEPT


You might have source interfaces/ports etc in there, but the -y flag
is the one that is of interest - it relates to SYN packets.

It might not be this at all - since you haven't given all that much
info, but I figured I'd suggest this, just in case it jogs your memory
either way.

If not, erm, dunno, have to think about it. Never used ppp in demand
mode, so I've no ideas of the sort of problems that might occur.

HTH

Baz.

-- 
Barrie J. Bremner

baz [at] barriebremner.com | OpenPGP public key ID: 5164F553

http://barriebremner.com/
[Contact information available at website]

   "Linux? Is that some kind of MacOS?"
      -- BT technical support
---------------------------------------------------------------------
Sheffield Linux User's Group - http://www.sheflug.co.uk
To unsubscribe from this list send mail to
- <sheflug-request [at] vuw.ac.nz> - with the word 
 "unsubscribe" in the body of the message. 

  GNU the choice of a complete generation.