You should read the network tuning section of TrinityOS and
up the TCP window to 8192 or even 16k.

--David



>>a copy of your firewall rules
># for testing:
>intnet="172.23.1.0"
>intif="eth1"
>
>extnet="x.x.60.0"
>extif="eth1"

The external interface for both the internal and external
NICs are the same?


>ipfwadm -I -p accept
>ipfwadm -O -p accept
>ipfwadm -F -f reject   # This is what kills it

These are BAD defaults.  They ALL should be REJECT.


>ipfwadm -F -a masquerade -W ppp0 -S $intnet -D $universe

This is good though it should read "-S $intnet/24 -D $universe/0"


># Here I have tried the rules which were in the last message, and I have
># tried forwarding dns, web, smtp, etc... to the server. Neither worked

You forward this traffic with IPPORTFW and not the forward setup within
IPFWADM or IPCHAINS.

--David
.----------------------------------------------------------------------------.
|  David A. Ranch - Linux/Networking/PC hardware         [EMAIL PROTECTED]  |
!----                                                                    ----!
`----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----'


_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]

Reply via email to