Displaying 20 results from an estimated 6000 matches similar to: "http://lartc.org/howto/lartc.cookbook.mtu-mss.html"
2020 Jun 23
4
Voice broken during calls (again...)
Am 23.06.2020 08:43, schrieb Luca Bertoncello:
And another thing, I discovered right now...
> Could you suggest me something to restrict the problem?
> Currently, I think the problem can be:
>
> 1) on Asterisk
> 2) on my Gateway/Firewall
A couple of years ago I added this entry in my firewall:
/sbin/iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS
2003 Jun 02
3
[jik@kamens.brookline.ma.us: MSS clamping doesn''t work with masquerading through VPN?]
I sent the message below to this list over a week ago, and I haven''t
seen any response.
If this is not the correct forum for my question, can anyone suggest a
better person or place to which I should direct it?
Thank you,
Jonathan Kamens
------- Start of forwarded message -------
From: Jonathan Kamens <jik@kamens.brookline.ma.us>
To: lartc@mailman.ds9a.nl
Subject: [LARTC] MSS
2016 Mar 20
8
[Bug 1058] New: Add clamp MSS to MTU
https://bugzilla.netfilter.org/show_bug.cgi?id=1058
Bug ID: 1058
Summary: Add clamp MSS to MTU
Product: nftables
Version: unspecified
Hardware: All
OS: All
Status: NEW
Severity: enhancement
Priority: P5
Component: nft
Assignee: pablo at netfilter.org
Reporter:
2020 Jun 23
0
Voice broken during calls (again...)
Hello
Le 23/06/2020 à 09:06, Luca Bertoncello a écrit :
> Am 23.06.2020 08:43, schrieb Luca Bertoncello:
>
> And another thing, I discovered right now...
>
>> Could you suggest me something to restrict the problem?
>> Currently, I think the problem can be:
>>
>> 1) on Asterisk
>> 2) on my Gateway/Firewall
>
> A couple of years ago I added this entry
2020 Jun 23
0
Voice broken during calls (again...)
Hello,
if you need clampmss then it is highly probable there is a PMTU
discovery problem. The clampmss does not work for UDP.
I probably counted the size incorrectly. So you are able to ping with
size 1464 and not with 1466. How about trying same ping sizes from the
internet towards your site? I mean trying to ping from sites with
higher MTU than yours without lower MTU links in the path.
You
2002 Oct 25
1
(no subject)
Dear all,
I found this command in the HOWTO:
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 128
It resolve (almost) all my problems with the voip traffic on my linux-based
router.
The question is: What does it make exactly? It is safe to use it?
Thanks for your attention,
Luca Andreani
_______________________________________________
LARTC mailing list /
2004 Aug 20
1
some websites cant be reached
I have an internet router powered by gentoo+shorewall2.0.7+adsl(pppoe)
but my clients(and gateway) cant access some websites----these sites
must be okay,other sites are okay. The I believe it is caused by MTU or
MSS, but I have no idea yet. Btw, the unaccessable sites are dynamic, it
says: today I cant access www.oracle.com nextday I redail--to get
another ip,I can access www.oracle.com.
Help!
2014 Apr 30
2
[Bug 917] New: Kernel OOPS on Kernel 3.14.2
https://bugzilla.netfilter.org/show_bug.cgi?id=917
Summary: Kernel OOPS on Kernel 3.14.2
Product: netfilter/iptables
Version: unspecified
Platform: x86_64
OS/Version: Debian GNU/Linux
Status: NEW
Severity: critical
Priority: P5
Component: NAT
AssignedTo: netfilter-buglog at lists.netfilter.org
2004 Sep 22
2
Trouble with mails and connections through ADSL
Hello every one, first time poster, four month shorewaller ;)
As the subject states, I''ve been experienced the infamous trouble described
in the next excerpt from shorewall.conf
# MSS CLAMPING
#
# Set this variable to "Yes" or "yes" if you want the TCP "Clamp MSS to
PMTU"
# option. This option is most commonly required when your internet
# interface is some
2019 Aug 30
3
no DNS functionality on second subnet
What for OS is the server and windows clients?
The VPN tunnel, are you lowering MTU sizes?
Something like:
-A FORWARD -m policy --pol ipsec --dir in -s 192.168.0.0/24 -o eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss 1361:1536 -j TCPMSS --set-mss 1360
On the client PC's, have you checkout the windows firewall and are you allowing the remote subnets.
The samba server on the
2018 Apr 25
2
Speedup windows client [was] What is the maximum speed for download from a samba share
As counter example.
My slowest server, AMD E350 2 core, max 1.6Gz.
On 1Gb lan, disk 2x 5400rpm software raid 1 + 1 ssd.
Copy Speed 115Mb/s as in max 1Gb bandwith, from a win7 and win10 pc to the raid1.
File sizes.
100Mb+ get max 115Mb/s to a 4MB blocksized partition.
1-10mb files ,max 90-115Mb/s to a 1MB blocksized partition.
0.0-1mb files ,max 60-100Mb/s to a 4k blocksized partition.
2019 Apr 25
0
User mapping/login issue
Ps. Smb1 in Win10 ! I mean ofcourse..
Step 1: Go to Start button and type Control Panel. You will get Control Panel; Desktop app. Click on it.
Step 2: You will get a window with a list of software on it, go to the left side of the panel and click Turn Windows Features On or Off.
Step 3: You need to remove the checkmark beside SMB 1.0/CFs File Sharing Support to disable SMB1 for good. If you
2019 Apr 25
2
User mapping/login issue
Hai,
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> Stephen Davies via samba
> Verzonden: donderdag 25 april 2019 8:34
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] User mapping/login issue
>
> >
> It would appear that there may be more than one issue with my smb.conf.
> The scenario is a Centos 7
2006 May 15
0
pop3d and iptables lockup
I am having a problem implementing iptables with Courier's pop3
daemon. If I disable iptables, everything works fine. As soon as I
enable it, pop3 will stop working for messages over 32K. Small
messages will go through with no problems, but large ones will time
out.
I get this message from OE: "Your POP3 server has not responded in 60
seconds." And an option to stop or continue
2018 May 02
0
Speedup windows client [was] What is the maximum speed for download from a samba share
Am 25.04.2018 um 09:56 schrieb L.P.H. van Belle via samba:
> As counter example.
> My slowest server, AMD E350 2 core, max 1.6Gz.
> On 1Gb lan, disk 2x 5400rpm software raid 1 + 1 ssd.
>
> Copy Speed 115Mb/s as in max 1Gb bandwith, from a win7 and win10 pc to the raid1.
>
> File sizes.
> 100Mb+ get max 115Mb/s to a 4MB blocksized partition.
> 1-10mb files ,max
2007 Jan 18
0
[Bug 534] New: --mss in tcp.man
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=534
Summary: --mss in tcp.man
Product: iptables
Version: 1.3.5
Platform: i386
OS/Version: Debian GNU/Linux
Status: NEW
Severity: trivial
Priority: P2
Component: iptables
AssignedTo: laforge@netfilter.org
ReportedBy:
2005 Nov 25
1
2 WAN links and DNAT
Hi
Here is a short description of my network:
ppp0 (adsl) ppp1 (adsl)
| |
| |
---------------------
| Router |
| Firewall |
| MASQUERAD |
| DNAT |
| |
| eth0 |
---------------------
|
|
|
----------------------
|
2017 Jan 26
2
cannot connect without user/pass on Windows 10
Hi,
A number of students are unable to connect to our print server from
their Windows 10 client laptop without entering a user/pass. More
precisely: If you try to connect manually to \\IP it says "Username or
password incorrect" and prompts to enter a username/password. Despite
the server setting to map all users to guest (see further down). I did a
packet dump and the client pc
2019 Aug 30
0
no DNS functionality on second subnet
Ah, you gave the solution yourselve..
> client on "different" subnet:
>
> Host Name . . . . . . . . . . . . : pitter35
> Primary Dns Suffix . . . . . . . : <<< your missing ..
> DNS Suffix Search List. . . . . . : ier.ux.uis.no
> client on same subnet as DC:
>
> Host Name . . . . . . . . . . . . : geoah
> Primary Dns Suffix . .
2001 Dec 21
1
What's this 135/UDP traffic?
Hello,
This is a hard one, I've been trying to figure out something since
2 days...
When opening a document which has a link to another document, I see
traffic
from the Windows NT client station going to the Samba server on port
135/UDP. According to Microsoft's web site, port 135 TCP or UDP is
"Location Server"... but the Samba server doesn't listen for traffic
on port