>You should read the network tuning section of TrinityOS and
>up the TCP window to 8192 or even 16k.
ok
>The external interface for both the internal and external
>NICs are the same?
No, i'm just stupid =]
extif=eth0, intif=eth1
>These are BAD defaults. They ALL should be REJECT.
I know, and they will be. But since I can't get it to pass these
packets along, they are accept for now.
>This is good though it should read "-S $intnet/24 -D $universe/0"
Another mistype, that is what it is in the rules.
>You forward this traffic with IPPORTFW and not the forward setup within
>IPFWADM or IPCHAINS.
Even though the web server has a valid ip? Why would it work if forwarding
is set to default accept?
What I'm trying to find is an explicit allow for traffic going to the web
server.
ipfwadm -F -a accept -S $universe/0 -D $server/32
doesn't work.
Thanks,
John
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
