Hello All,

I seem to be having an interesting problem with some web sites I try and visit,
particularly http://www.pbs.org and http://www.half.com (ie, these are the
ones I recall having problems with).  Specifically, when I try and view these
pages from my desktop machine, they refuse to load, and eventually give up.
When I view them from my router/NAT machine, I see them fine.

Some details:
I have a simple two-machine network.  Machine A is connected via 1 NIC (an
NE2000 if it matters) to a DSL modem, and thus to my ISP, and via another
(D-Link with the Tulip driver) to a hub and thus to my desktop machine, B.
A is running Linux kernel 2.4.13i, with netfilter and NAT compiled into the
kernel, and is up-to-date with Debian's testing distribution.  iptables is
version 1.2.5

Machine A and B both have static IP addresses, machine A using the IP assigned
by my ISP and 192.168.0.1 internally, and B using 192.168.0.10.

I used tcpdump to try and capture details of an attempted connection with
www.pbs.org from my desktop and from the router.  While I do not know much
about TCP, it seems that in both cases a connection is established (I do
receive ACK packets from www.pbs.com in both cases), but machine A also
receives several PUSH packets where machine B does not.  Both connections are
also cleanly killed with FIN packets and the requisite ACK.  I can provide
tcpdump data that I collected if anyone will find it useful, or I can get
more if people want to suggest useful flag combinations to try.

This problem does not affect every web server I try and visit.  It seems only
a small percentage do not wish to talk to me.  However, I am finding this
slightly irritating, and am hoping someone can clear up this problem for me.
Also, I plan on extending my network by several machines soon, and would
like to not have this problem with them as well.

I hope I've given enough data for people to point me in the right direction
(although I also hope this isn't too _much_ data).  Thank you for all your
help.

John Cater
[EMAIL PROTECTED]


Reply via email to