This is a discussion on Re: ipf 4.1.13 + NAT + FTP proxy = window scaling problem within the IPFilter forums, part of the System Security and Security Related category; On Thu, 21 Dec 2006, Darren Reed wrote: > Pekka Savola wrote: >> On Thu, 21 Dec 2006, Darren ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
On Thu, 21 Dec 2006, Darren Reed wrote:
> Pekka Savola wrote: >> On Thu, 21 Dec 2006, Darren Reed wrote: >>> ok, please apply the attach patch so I can collect some information from >>> the kernel. >> >> The output is like follows (there are no such messages if FTP proxy is >> disabled): >> >> fdata:maxend 1129616061 end 1129616337 >> fdata:end 1129672809 seq 1129614889 >> fdata:winflags 4 winscale 0 >> tdata:winflags 0 winscale 0 >> ack 2182360656 ackskew 0 win 65160 << 0 maxwin 8192 > > Ah, I think I've read the RFC incorrectly and interpreted it to > mean that if either end is not doing window scaling then it is > not enabled. > > The attached diffs should undo that madness. Hmm.. it still doesn't seem to work. The messages are like: fdata:maxend 4163995118 end 4163996566 fdata:end 4163995118 seq 4163995118 fdata:winflags 7 winscale 6 tdata:winflags 0 winscale 0 ack 423266013 ackskew 0 win 4170240 << 6 maxwin 8192 fdata:maxend 4163995682 end 4163998014 fdata:end 4163995118 seq 4163996566 fdata:winflags 7 winscale 6 tdata:winflags 0 winscale 0 ack 423266013 ackskew 0 win 4170240 << 6 maxwin 8192 fdata:maxend 4163995682 end 4163999462 fdata:end 4163995118 seq 4163998014 fdata:winflags 7 winscale 6 tdata:winflags 0 winscale 0 ack 423266013 ackskew 0 win 4170240 << 6 maxwin 8192 fdata:maxend 4163995682 end 4164000910 fdata:end 4163995118 seq 4163999462 fdata:winflags 7 winscale 6 tdata:winflags 0 winscale 0 -- Pekka Savola "You each name yourselves king, yet the Netcore Oy kingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings |