[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: really weird NAT (?) problem



"Nellis, Nick" wrote:
> 
> have you tried this with any other sites?
> what are you ipnat rules?
> 
So far, it only happened with netbsd.org.

nat.conf looked like this:
nat on tun0 from 192.168.0.1/24 to any -> 212.100.182.23

But I found something.
When setting the MTU of the client system to 1492, it worked.
So it was actually a known PPPoE related problem
(mtu of the internet-connection (tun0) is 1492).

BUT, isn't the "mssfixup" option in ppp.conf supposed to
handle this? It's been enabled all the time, but it didn't
have any effect when using pf's nat capabilities.

I am now using ppp's "nat enable" option instead of pf nat,
and it works just fine.

Isn't this a bug (in ppp) ?  Shouldn't the [tcp]mssfixup
option check packets nat'ed by pf too?