Re: [leaf-user] Portforwarding error

[M Lu]

Thank you Tom for your advice. When using '-n' with tcpdump, the IP has been 
printed and it also looks good. Well, I will try to ask him to replace the 
DMZ machine with another one for testing and see if the problem goes away.

Thanks again, Tom.
--
tcpdump -n -i eth2 host 24.61.157.240
20:24:25.944632 24.61.157.240.3453 > 10.0.18.201.80: S 
506447029:506447029(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
20:24:25.945120 10.0.18.201.80 > 24.61.157.240.3453: S 
2207623183:2207623183(0) ack 506447030 win 65535 <mss 1460,nop,nop,sackOK> 
(DF)
20:24:28.890543 10.0.18.201.80 > 24.61.157.240.3453: S 
2207623183:2207623183(0) ack 506447030 win 65535 <mss 1460,nop,nop,sackOK> 
(DF)
20:24:28.912287 24.61.157.240.3453 > 10.0.18.201.80: S 
506447029:506447029(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
20:24:28.912429 10.0.18.201.80 > 24.61.157.240.3453: . ack 1 win 65535 (DF)
20:24:34.898505 10.0.18.201.80 > 24.61.157.240.3453: S 
2207623183:2207623183(0) ack 506447030 win 65535 <mss 1460,nop,nop,sackOK> 
(DF)
20:24:34.920981 24.61.157.240.3453 > 10.0.18.201.80: S 
506447029:506447029(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
20:24:34.921121 10.0.18.201.80 > 24.61.157.240.3453: . ack 1 win 65535 (DF)

----- Original Message ----- 
From: "Tom Eastep" <[EMAIL PROTECTED]>
To: "M Lu" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Sunday, July 18, 2004 11:13 AM
Subject: Re: [leaf-user] Portforwarding error


Tom Eastep wrote:
After I sent this, I realized that it is probably nonsense since the SYN 
is reaching the server. I would still make sure that the SYN,ACK has the 
proper ethernet destination address though...
Another piece of advice -- *Always* use the -n option when using tcpdump; 
otherwise, DNS problems can totally mislead you as to what is going on.

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html