I've set-up a NAT pool using SAME with the -nodst option and it works
well, but every now and then it seems to cough and not function
correctly. A user is trying to sign into sharepoint services using port
80 and most of the traffic comes from the same source IP address and
then it changes source IP for abouta dozen packets then goes back to the
original source IP address. I think this is causing a failure during the
login process.
Stock Debian kernel 2.6.18-4-686 (etch)
iptables v1.3.6
22:35:27.127468 IP 65.121.23.28.80 > 67.128.39.174.4303: F 2129:2129(0)
ack 597 win 64940 <nop,nop,timestamp 6747637 698698053>
22:35:27.127530 IP 67.128.39.174.4303 > 65.121.23.28.80: . ack 2130 win
1092 <nop,nop,timestamp 698698060 6747637>
22:35:27.128368 IP 67.128.39.134.1430 > 65.121.23.28.80: S
3143683502:3143683502(0) win 5840 <mss 1460,sackOK,timestamp 698698060
0,nop,wscale 3>
22:35:27.143836 IP 65.121.23.28.80 > 67.128.39.134.1430: S
1823111154:1823111154(0) ack 3143683503 win 16384 <mss 1460,nop,wscale
0,nop,nop,timestamp 0 0,nop,nop,sackOK>
22:35:27.143911 IP 67.128.39.134.1430 > 65.121.23.28.80: . ack 1 win 730
<nop,nop,timestamp 698698064 0>
Thanks,
Robert
well, but every now and then it seems to cough and not function
correctly. A user is trying to sign into sharepoint services using port
80 and most of the traffic comes from the same source IP address and
then it changes source IP for abouta dozen packets then goes back to the
original source IP address. I think this is causing a failure during the
login process.
Stock Debian kernel 2.6.18-4-686 (etch)
iptables v1.3.6
22:35:27.127468 IP 65.121.23.28.80 > 67.128.39.174.4303: F 2129:2129(0)
ack 597 win 64940 <nop,nop,timestamp 6747637 698698053>
22:35:27.127530 IP 67.128.39.174.4303 > 65.121.23.28.80: . ack 2130 win
1092 <nop,nop,timestamp 698698060 6747637>
22:35:27.128368 IP 67.128.39.134.1430 > 65.121.23.28.80: S
3143683502:3143683502(0) win 5840 <mss 1460,sackOK,timestamp 698698060
0,nop,wscale 3>
22:35:27.143836 IP 65.121.23.28.80 > 67.128.39.134.1430: S
1823111154:1823111154(0) ack 3143683503 win 16384 <mss 1460,nop,wscale
0,nop,nop,timestamp 0 0,nop,nop,sackOK>
22:35:27.143911 IP 67.128.39.134.1430 > 65.121.23.28.80: . ack 1 win 730
<nop,nop,timestamp 698698064 0>
Thanks,
Robert