Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.hardware > #2884

Re: All better now (Re: Talk to modem with USB to serial adapter: fail)

Show all headers | View raw

Richard Kettlewell <rjk@greenend.org.uk> writes:

> Moe Trin <ibuprofin@painkiller.example.tld.invalid> writes:
>> <87pp1z2mqk.fsf_-_@bogus.nodomain.nowhere>, Mike Spencer wrote:
>>> I was unable to complete the transaction using the recent browser on
>>> the newish laptop when doing Masquerade/NAT through my dialup-connected
>>> main box.  Disconnecting, reconnecting by using dialup directly from
>>> the laptop (the successful consequence of our recent exchange),
>>> everything worked as expected.  I suppose not a hardware problem but
>>> why might a masqueraded connection hang?
>>
>> Paranoia on the part of the SSL (Secure Sockets Layer).  Port numbers
>> and IP address on your side of the connection don't match what your
>> browser encoded inside the packet.  Your laptop on 192.168.1.12 connects
>> from (arbitrary port number - say 12345) to the server's port 443, BUT
>> when the connection is masqueraded, it leaves your house coming from a
>> different port on the masquerading box AND has a completely different IP
>> address.   Because the data is encoded by your laptop (rather than the
>> masquerading box), there is a mis-match and we're now concerned about a
>> "man-in-the-middle" attack.    PANIC!!!  Run Around In Circles!!!  Call
>> out the Marines... er.. Mounties!!!  Some sites (and some browsers) will
>> give a warning that things don't look right (and some won't) - while
>> some will stop things rather than risk it.
> 
> This is nonsense.  SSL/TLS work fine over NAT.

I'm prepared to believe both you and Moe: Works fine except when it
doesn't.  I haven't read the relevant RFCs and don't understand either
SSL/TLS or NAT at the byte-by-byte level.

Do you have another suggestion as to why the Lee Valley web site would
hang via masquerade and work on direct connection?


-- 
Mike Spencer                  Nova Scotia, Canada

Back to comp.os.linux.hardware | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Talk to modem with USB to serial adapter: fail Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-08-12 03:03 -0300
  Re: Talk to modem with USB to serial adapter: fail Jerry Peters <jerry@example.invalid> - 2015-08-12 20:36 +0000
    Re: Talk to modem with USB to serial adapter: fail Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-08-13 04:19 -0300
      Re: Talk to modem with USB to serial adapter: fail Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2015-08-13 21:17 +0000
        Re: Talk to modem with USB to serial adapter: fail Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-08-15 02:26 -0300
          Re: Talk to modem with USB to serial adapter: fail Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2015-08-16 00:45 +0000
            Re: Talk to modem with USB to serial adapter: fail Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-08-16 00:43 -0300
              Re: Talk to modem with USB to serial adapter: fail Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2015-08-16 20:09 +0000
            Re: Talk to modem with USB to serial adapter: fail Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-08-16 01:41 -0300
              Re: Talk to modem with USB to serial adapter: fail Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2015-08-16 20:10 +0000
                Re: Talk to modem with USB to serial adapter: fail Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-08-16 22:28 -0300
                Re: Talk to modem with USB to serial adapter: fail Michael Black <et472@ncf.ca> - 2015-08-16 22:48 -0400
                Re: Talk to modem with USB to serial adapter: fail Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-08-17 03:35 -0300
                Re: Talk to modem with USB to serial adapter: fail Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-08-17 03:22 -0300
                Re: Talk to modem with USB to serial adapter: fail Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2015-08-17 23:50 +0000
                Re: Talk to modem with USB to serial adapter: fail Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-08-18 16:16 -0300
                Re: Talk to modem with USB to serial adapter: fail Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2015-08-21 03:31 +0000
                Re: Talk to modem with USB to serial adapter: fail Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-08-25 01:58 -0300
                Re: Talk to modem with USB to serial adapter: fail Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2015-08-27 02:28 +0000
                All better now (Re: Talk to modem with USB to serial adapter: fail) Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-09-03 18:53 -0300
                Re: All better now (Re: Talk to modem with USB to serial adapter: fail) Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2015-09-04 20:00 +0000
                Re: All better now (Re: Talk to modem with USB to serial adapter: fail) Richard Kettlewell <rjk@greenend.org.uk> - 2015-09-04 21:09 +0100
                Re: All better now (Re: Talk to modem with USB to serial adapter: fail) Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-09-04 23:14 -0300
                Re: All better now (Re: Talk to modem with USB to serial adapter: fail) Richard Kettlewell <rjk@greenend.org.uk> - 2015-09-05 10:08 +0100
                Re: All better now (Re: Talk to modem with USB to serial adapter: fail) Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2015-09-05 18:08 +0000
                Re: All better now (Re: Talk to modem with USB to serial adapter:  fail) Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-09-06 01:31 -0300
                Re: All better now (Re: Talk to modem with USB to serial adapter:  fail) Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2015-09-06 19:17 +0000
                Re: All better now (Re: Talk to modem with USB to serial adapter:   fail) Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-09-17 01:26 -0300
                Re: All better now (Re: Talk to modem with USB to serial adapter:   fail) Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2015-09-17 05:53 +0000
                Re: All better now (Re: Talk to modem with USB to serial adapter:    fail) Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-09-17 04:02 -0300
                Re: All better now (Re: Talk to modem with USB to serial adapter:    fail) Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2015-09-17 18:02 +0000
                Re: All better now (Re: Talk to modem with USB to serial adapter:     fail) Mike Spencer <mds@bogus.nodomain.nowhere> - 2015-09-18 02:05 -0300
                Re: All better now (Re: Talk to modem with USB to serial adapter:    fail) Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2015-09-17 19:14 +0000
                Re: All better now (Re: Talk to modem with USB to serial adapter:    fail) Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2015-09-18 01:55 +0000
                Re: All better now (Re: Talk to modem with USB to serial adapter:    fail) Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2015-09-18 21:22 +0000
                Re: All better now (Re: Talk to modem with USB to serial adapter:   fail) Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2015-09-17 19:12 +0000

csiph-web