Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #1343

Re: iptables NAT forwarding adding 75-100ms

From Pascal Hambourg <boite-a-spam@plouf.fr.eu.org>
Newsgroups comp.os.linux.networking
Subject Re: iptables NAT forwarding adding 75-100ms
Date 2012-05-01 03:55 +0200
Organization Plouf !
Message-ID <jnnfpt$j5j$1@saria.nerim.net> (permalink)
References (2 earlier) <slrnjptasb.gqh.mike.lovell@usenet.home.b0h0.com> <jnnaa0$gpk$1@saria.nerim.net> <slrnjpuck3.gqh.mike.lovell@usenet.home.b0h0.com> <jnncks$hvk$1@saria.nerim.net> <slrnjpudup.gqh.mike.lovell@usenet.home.b0h0.com>

Show all headers | View raw

Mike Lovell a écrit :
> On 2012-05-01, Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> wrote:
>>
>>> sudo iptables -t mangle -A PREROUTING -i eth0 -j TTL --ttl-set 56
>>> sudo iptables -t mangle -A OUTPUT -j TTL --ttl-set 56
>> Note that the TTL of forwarded packets is decremented by 1 after the
>> PREROUTING chains, so you shouldn't set the same TTL in OUTPUT if you
>> want the same TTL when locally-generated and forwarded packets leave
>> your router.
>>
>> Or you can set the TTL in POSTROUTING for both locally-generated and
>> forwarded packets.
> 
> Yer you're right, I jumped the gun.  It's gone back up now, must have
> been a fluke.  It was lower right after coming up from a reboot.
> 
> So this would achieve the same TTL?
> 
> iptables -t mangle -A PREROUTING -i eth0 -j TTL --ttl-set 57
> iptables -t mangle -A OUTPUT -j TTL --ttl-set 56

I guess so. Or just :

iptables -t mangle -A POSTROUTING -o wan0 -j TTL --ttl-set 56

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

iptables NAT forwarding adding 75-100ms Mike Lovell <mike.lovell@null.local> - 2012-04-29 17:42 -0500
  Re: iptables NAT forwarding adding 75-100ms ein <ein@no.spam> - 2012-04-30 11:06 +0200
    Re: iptables NAT forwarding adding 75-100ms ein <ein@no.spam> - 2012-04-30 11:08 +0200
    Re: iptables NAT forwarding adding 75-100ms Mike Lovell <mike.lovell@null.local> - 2012-04-30 10:11 -0500
      Re: iptables NAT forwarding adding 75-100ms Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-05-01 02:21 +0200
        Re: iptables NAT forwarding adding 75-100ms Mike Lovell <mike.lovell@null.local> - 2012-04-30 19:46 -0500
          Re: iptables NAT forwarding adding 75-100ms Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-05-01 03:01 +0200
            Re: iptables NAT forwarding adding 75-100ms Mike Lovell <mike.lovell@null.local> - 2012-04-30 20:09 -0500
              Re: iptables NAT forwarding adding 75-100ms Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-05-01 03:55 +0200
                Re: iptables NAT forwarding adding 75-100ms Mike Lovell <mike.lovell@null.local> - 2012-04-30 21:07 -0500
                Re: iptables NAT forwarding adding 75-100ms Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-05-01 10:46 +0200
              Re: iptables NAT forwarding adding 75-100ms Ralph Spitzner <rasp@spitzner.org> - 2012-05-04 09:30 +0200
        Re: iptables NAT forwarding adding 75-100ms Ian Zimmerman <itz@buug.org> - 2012-05-01 12:35 -0700
          Re: iptables NAT forwarding adding 75-100ms Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-05-02 00:06 +0200
        Re: iptables NAT forwarding adding 75-100ms ein <ein@no.spam> - 2012-05-02 07:43 +0200
        Re: iptables NAT forwarding adding 75-100ms Ralph Spitzner <rasp@spitzner.org> - 2012-05-04 09:22 +0200
  Re: iptables NAT forwarding adding 75-100ms Chris Davies <chris-usenet@roaima.co.uk> - 2012-04-30 10:34 +0100
    Re: iptables NAT forwarding adding 75-100ms Richard Kettlewell <rjk@greenend.org.uk> - 2012-04-30 11:15 +0100
      Re: iptables NAT forwarding adding 75-100ms Chris Davies <chris-usenet@roaima.co.uk> - 2012-04-30 23:59 +0100
    Re: iptables NAT forwarding adding 75-100ms Rick Jones <rick.jones2@hp.com> - 2012-04-30 18:33 +0000
      Re: iptables NAT forwarding adding 75-100ms ein <ein@no.spam> - 2012-05-02 07:51 +0200
        Re: iptables NAT forwarding adding 75-100ms Rick Jones <rick.jones2@hp.com> - 2012-05-02 19:07 +0000
  Re: iptables NAT forwarding adding 75-100ms Alastair Black <abqab.nemo@example.net> - 2012-04-30 06:40 -0600
    Re: iptables NAT forwarding adding 75-100ms Mike Lovell <mike.lovell@null.local> - 2012-04-30 10:12 -0500
  Re: iptables NAT forwarding adding 75-100ms Wolfram Gloger <wmglo@dent.med.uni-muenchen.de> - 2012-05-09 14:05 +0200

csiph-web