Re: ipf 4.1.13 + NAT + FTP proxy = window scaling problem

This is a discussion on Re: ipf 4.1.13 + NAT + FTP proxy = window scaling problem within the IPFilter forums, part of the System Security and Security Related category; On Thu, 21 Dec 2006, Darren Reed wrote: > Pekka Savola wrote: >> On Thu, 21 Dec 2006, Darren ...


Go Back   Usenet Forums > System Security and Security Related > IPFilter

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 12-20-2006
Pekka Savola
 
Posts: n/a
Default Re: ipf 4.1.13 + NAT + FTP proxy = window scaling problem

On Thu, 21 Dec 2006, Darren Reed wrote:
> Pekka Savola wrote:
>> On Thu, 21 Dec 2006, Darren Reed wrote:
>>> ok, please apply the attach patch so I can collect some information from
>>> the kernel.

>>
>> The output is like follows (there are no such messages if FTP proxy is
>> disabled):
>>
>> fdata:maxend 1129616061 end 1129616337
>> fdata:end 1129672809 seq 1129614889
>> fdata:winflags 4 winscale 0
>> tdata:winflags 0 winscale 0
>> ack 2182360656 ackskew 0 win 65160 << 0 maxwin 8192

>
> Ah, I think I've read the RFC incorrectly and interpreted it to
> mean that if either end is not doing window scaling then it is
> not enabled.
>
> The attached diffs should undo that madness.


Hmm.. it still doesn't seem to work. The messages are like:

fdata:maxend 4163995118 end 4163996566
fdata:end 4163995118 seq 4163995118
fdata:winflags 7 winscale 6
tdata:winflags 0 winscale 0
ack 423266013 ackskew 0 win 4170240 << 6 maxwin 8192
fdata:maxend 4163995682 end 4163998014
fdata:end 4163995118 seq 4163996566
fdata:winflags 7 winscale 6
tdata:winflags 0 winscale 0
ack 423266013 ackskew 0 win 4170240 << 6 maxwin 8192
fdata:maxend 4163995682 end 4163999462
fdata:end 4163995118 seq 4163998014
fdata:winflags 7 winscale 6
tdata:winflags 0 winscale 0
ack 423266013 ackskew 0 win 4170240 << 6 maxwin 8192
fdata:maxend 4163995682 end 4164000910
fdata:end 4163995118 seq 4163999462
fdata:winflags 7 winscale 6
tdata:winflags 0 winscale 0

--
Pekka Savola "You each name yourselves king, yet the
Netcore Oy kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 04:02 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0