> FYI, 1.3.86 seems to have fixed both the fragment and ftp problems. I'm
> running 1.3.87 on my firewall with ip_masq_ftp module loaded and I just
> ftp'd several files using a machine behind the firewall and active ftp. I
> know the upstream link causes fragments but ftp worked.
No it hasnt..... I've just installed 1.3.88, and tried to run an FTP
session and an IRC session thru the masq, and they still exhibit the
same problems as before. I've tried to ftp to funet.fi, and it still
returns an error when doing the directory. mIRC4.0 also exhibits the
same problem as before... it will connect to the server and display
the message of the day, but it then times out.
>
> The only problem at the moment is that you must compile with module
> support, ip_masq_ftp only runs as a module. The module will not load
> automatically, add it to /etc/rc.d/rc.modules or wherever you load modules
> (I don't run kerneld). IRC has the same problems.
Yeah.... a minor hassle, but i'm sure that its being worked on for
kerneld. Loading them via rc.modules is only a minor pain till then.
> Interesting that 1.3.86 also adds tunable masquerade timeouts with an
> socket option to set them. Anybody know of a command to set this yet?
Sorry...... never looked at that bit yet
Graham
Ask not what you can do for your country,
but what your government is doing to you