[4551] in linux-net channel archive
IP Masquerading: No good for FTP?
daemon@ATHENA.MIT.EDU (RHS Linux User)
Fri Sep 27 22:38:34 1996
Date: Fri, 27 Sep 1996 08:44:07 -0500 (CDT)
From: RHS Linux User <ggoebel@ggoebel.sound.net>
To: Juan Jose Ciarlante <jjciarla@raiz.uncu.edu.ar>
cc: Remco van de Meent <remco@cal052012.student.utwente.nl>,
Charles Brian Hill <hill@unr.net>, linux-net@vger.rutgers.edu
In-Reply-To: <Pine.LNX.3.95.960926151834.679B-100000@kosa>
I don't know about any of you, but I've been using IP Masquerading for
about 4-6 months, and through many kernels, many ipfwadm and masquerading
revisions, I have yet to be able to complete and actual ftp download.
Yes I'm using always defrag packets... Once in a blue moon the ftp
download will complete, but I can't execute or extract what I downloaded.
Usually it all just hangs at 99% complete.
On the other hand, in Netscape RealAudio (turned to TCP only), PointCast
Network, and http transmissions seem to work just fine. It is great for
browsing and casual use, but not a dedicated connection.
Has anyone run into this and solved it? (ie, am I making a stupid mistake
somewhere in my implementation?) I was under the impression that FTP runs
on top of TCP so that it should work just fine... only things like "ping",
ICMP, or anything on top of UDP would be affected.
Garrett
ggoebel@ggoebel.sound.net
On Thu, 26 Sep 1996, Juan Jose Ciarlante wrote:
> On Tue, 24 Sep 1996, Remco van de Meent wrote:
>
> > If you wanna loose them, why don't you just simply comment out the code
> > that log's such things in the source code for ip_masq. (though I dunno
> > where to find it, never looked after it).
> Here we come to the ``semantic'' question of masquerading, not being
> a router nor an application-level proxy ... (something in between ;).
> So, should we toss corrupted pkts or leave detection to linkends like a
> router? Maybe we should only spend CPU cycles checking packets that go
> through ip_masq application modules.
>
> 2
> -- Juanjo, J C <jjciarla@raiz.uncu.edu.ar>
>
>
>
