Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #1347

Re: iptables NAT forwarding adding 75-100ms

From Ian Zimmerman <itz@buug.org>
Subject Re: iptables NAT forwarding adding 75-100ms
References <slrnjprgv7.6dm.mike.lovell@usenet.home.b0h0.com> <jnlkm8$7c3$1@node2.news.atman.pl> <slrnjptasb.gqh.mike.lovell@usenet.home.b0h0.com> <jnnaa0$gpk$1@saria.nerim.net>
Date 2012-05-01 12:35 -0700
Message-ID <87vckfk82o.fsf@foolinux.dyndns.org> (permalink)
Newsgroups comp.os.linux.networking
Organization X-Privat.Org NNTP Server - http://www.x-privat.org

Show all headers | View raw


Mike> why (how) would something be distinguishing between the router
Mike> carrying out the ping, and something behind the router?

Pascal> In the old days some ISPs have been known to try to detect
Pascal> multiple hosts behind NAT with variations of the TTL in packets.

Mike> Can I mask it from doing so (if that's the problem)?

Pascal> You can rewrite the TTL with iptables. Note that traceroute
Pascal> won't work any more.

Why the need for iptables?  Wouldn't it be simpler and safer to just
tweak the value in /proc/sys/net/ipv4/ip_default_ttl on each host
according to its hop distance from the router?

-- 
Ian Zimmerman
gpg public key: 1024D/C6FF61AD
fingerprint: 66DC D68F 5C1B 4D71 2EE5  BD03 8A00 786C C6FF 61AD
http://www.gravatar.com/avatar/c66875cda51109f76c6312f4d4743d1e.png
Rule 420: All persons more than eight miles high to leave the court.

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

iptables NAT forwarding adding 75-100ms Mike Lovell <mike.lovell@null.local> - 2012-04-29 17:42 -0500
  Re: iptables NAT forwarding adding 75-100ms ein <ein@no.spam> - 2012-04-30 11:06 +0200
    Re: iptables NAT forwarding adding 75-100ms ein <ein@no.spam> - 2012-04-30 11:08 +0200
    Re: iptables NAT forwarding adding 75-100ms Mike Lovell <mike.lovell@null.local> - 2012-04-30 10:11 -0500
      Re: iptables NAT forwarding adding 75-100ms Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-05-01 02:21 +0200
        Re: iptables NAT forwarding adding 75-100ms Mike Lovell <mike.lovell@null.local> - 2012-04-30 19:46 -0500
          Re: iptables NAT forwarding adding 75-100ms Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-05-01 03:01 +0200
            Re: iptables NAT forwarding adding 75-100ms Mike Lovell <mike.lovell@null.local> - 2012-04-30 20:09 -0500
              Re: iptables NAT forwarding adding 75-100ms Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-05-01 03:55 +0200
                Re: iptables NAT forwarding adding 75-100ms Mike Lovell <mike.lovell@null.local> - 2012-04-30 21:07 -0500
                Re: iptables NAT forwarding adding 75-100ms Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-05-01 10:46 +0200
              Re: iptables NAT forwarding adding 75-100ms Ralph Spitzner <rasp@spitzner.org> - 2012-05-04 09:30 +0200
        Re: iptables NAT forwarding adding 75-100ms Ian Zimmerman <itz@buug.org> - 2012-05-01 12:35 -0700
          Re: iptables NAT forwarding adding 75-100ms Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-05-02 00:06 +0200
        Re: iptables NAT forwarding adding 75-100ms ein <ein@no.spam> - 2012-05-02 07:43 +0200
        Re: iptables NAT forwarding adding 75-100ms Ralph Spitzner <rasp@spitzner.org> - 2012-05-04 09:22 +0200
  Re: iptables NAT forwarding adding 75-100ms Chris Davies <chris-usenet@roaima.co.uk> - 2012-04-30 10:34 +0100
    Re: iptables NAT forwarding adding 75-100ms Richard Kettlewell <rjk@greenend.org.uk> - 2012-04-30 11:15 +0100
      Re: iptables NAT forwarding adding 75-100ms Chris Davies <chris-usenet@roaima.co.uk> - 2012-04-30 23:59 +0100
    Re: iptables NAT forwarding adding 75-100ms Rick Jones <rick.jones2@hp.com> - 2012-04-30 18:33 +0000
      Re: iptables NAT forwarding adding 75-100ms ein <ein@no.spam> - 2012-05-02 07:51 +0200
        Re: iptables NAT forwarding adding 75-100ms Rick Jones <rick.jones2@hp.com> - 2012-05-02 19:07 +0000
  Re: iptables NAT forwarding adding 75-100ms Alastair Black <abqab.nemo@example.net> - 2012-04-30 06:40 -0600
    Re: iptables NAT forwarding adding 75-100ms Mike Lovell <mike.lovell@null.local> - 2012-04-30 10:12 -0500
  Re: iptables NAT forwarding adding 75-100ms Wolfram Gloger <wmglo@dent.med.uni-muenchen.de> - 2012-05-09 14:05 +0200

csiph-web