[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Possível bug no pppoeconf do Sarge



Boa noite pessoal,

Esta semana, creio que encontrei um bug no aplicativo pppoeconf, ao
configurar meu servidor com Speedy e compartilhar a Internet.
Ao configurá-lo (pppoeconf), o mesmo cita algo sobre:


"Many providers have routers that do not support TCP packets with a MSS
higher than 1460. Usually, outgoing packets have this MSS when they go
through one real Ethernet link with the default MTU size (1500).
Unfortunately, if you are forwarding packets from other hosts (i.e.
doing masquerading) the MSS may be increased depending on the packet
size and the route to the client hosts, so your client machines won't be
able to connect to some sites. There is a solution: the maximum MSS can
be limited by pppoe. You can find more details about this issue in the
pppoe documentation.

Should pppoe clamp MSS at 1452 bytes?

If unsure, say yes. 

(If you still get problems described above, try setting to 1412 in the
dsl-provider file.)")
 

Tive problemas como lentidão por das máquinas da rede em acessarem
alguns sites, conforme diz acima, respondi "yes"para a pergunta.

Bom, mesmo assim o problema continuou e fuçando no scripts do ppoeconf
acabei descobrindo um bug (pelo menos é o que eu acho). Vejam a parte do
script:

"

     if [ "$kernel_pppoe" ]; then
        printf '#!/bin/sh\n# Enable MSS clamping (autogenerated by

pppoeconf)\n\niptables -p "$PPP_IFACE" --insert FORWARD 1 -p tcp 
                        ? --> não seria "-o"

--tcp-flags SYN,RST SYN -m tcpmss --mss 1400:1536 -j TCPMSS
--clamp-mss-to-pmtu\n' > /etc/ppp/ip-up.d/0clampmss
        printf '#!/bin/sh\n# Disable MSS clamping (autogenerated by
pppoeconf)\n\niptables -L -n -v --line-numbers | grep "TCPMSS.*
$PPP_IFACE.*clamp" | cut -f1 -d " " | xargs -n1 -r iptables -D FORWARD
\n' > /etc/ppp/ip-down.d/0clampmss 

"

Observaram o problema acima.

Após inserir o "-o" a rede funcionou normalmente !!

Caso este seja um bug mesmo, poderiam me ajudar a reportá-lo 


Até mais, conto a ajuda de vocês.

Eduardo.



Reply to: