iptables!

[Vyrus]

ok this might be considered a n00b question but, here goes anyway. i have a fileserver / router debian box that i use for "internet connection sharring" over a 5 system network (windows and mac pc's). it works, (i used a wrapper app called agt to setup the iptable routing) but for some reasons there are some sites (microsoft.com) that can not be viewed by any system other than the server box. after an ethereal check i can see that for some reason, the http request gets sent, but the html data never makes it back to the natted box for some reason. anybody got a fix ?

[skroo]

ok this might be considered a n00b question but, here goes anyway. i have a fileserver / router debian box that i use for "internet connection sharring" over a 5 system network (windows and mac pc's). it works, (i used a wrapper app called agt to setup the iptable routing) but for some reasons there are some sites (microsoft.com) that can not be viewed by any system other than the server box. after an ethereal check i can see that for some reason, the http request gets sent, but the html data never makes it back to the natted box for some reason. anybody got a fix ?

Is this problem consistent amongst all the boxes on the LAN, or is it hit-or-miss?

My guess is that you don't have IP masquerading set up properly... But that's just a guess.

[AlxRogan]

I had the same problems for various sites when I first used PPPoE a while back. Check out the MTU settings in your clients. I had to change them on the client's themselves to get to some sites.

Good luck.

[Vyrus]

well the performance is "hit or miss" as in some sites dont work but most do. the thing is, it is alwase the SAME sites over and over again. microsoft.com for example can NOT be seen by any system on the network other than the server. there are a fiew other sites but the result is the same no matter what part of the net im on unless im on the server where evrything works great :P

[TheCotMan]

after an ethereal check i can see that for some reason, the http request gets sent, but the html data never makes it back to the natted box for some reason. anybody got a fix ?

Yes, but where is the ethereal instance running?
Is it running on the "External" interface to the Internet as well, or just the internal one to your NAT-ed LAN?

If this is only to the LAN, then you have only done half of your job. You need to also sniff the external interface to see if the request is being sent out on the Internet and returned or not. This will help to identify what link in the chain is broken, and where further inspection is required.