LINUX.ORG.RU
ФорумAdmin

Сайт http://odnoklassniki.ru неработает через руотер


0

0

Есть роутер Debian linux stable, ядро 2.6.18
Маршрутизация - iptables
инет - pptp
Для выхода в инет тупо правило
iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -j MASQUERADE

Все работает но odnoklassniki.ru иногда просто перестает работать, помогает раз 10 к инету переподключится :) При этом с самого роутера (консольный броузер) все работает.

Ниже tcpdump лог , пробовал поигратся с mtu и ttl толку мало :(


router:~# tcpdump -i ppp0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
02:36:52.971369 IP 89-178-53-98.broadband.corbina.ru.1687 > 81.176.227.133.www: S 129325513:129325513(0) win 65535 <mss 1460,nop,nop,sac kOK>
02:36:52.972837 IP 89-178-53-98.broadband.corbina.ru.32780 > hdns1.corbina.net.domain: 31378+ PTR? 133.227.176.81.in-addr.arpa. (45)
02:36:52.974060 IP hdns1.corbina.net.domain > 89-178-53-98.broadband.corbina.ru.32780: 31378 NXDomain 0/1/0 (112)
02:36:52.974529 IP 89-178-53-98.broadband.corbina.ru.32780 > hdns1.corbina.net.domain: 64581+ PTR? 98.53.178.89.in-addr.arpa. (43)
02:36:52.974689 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: S 2564248924:2564248924(0) ack 129325514 win 5840 <mss 1 420,nop,nop,sackOK>
02:36:52.974993 IP 89-178-53-98.broadband.corbina.ru.1687 > 81.176.227.133.www: . ack 1 win 65535
02:36:52.975141 IP 89-178-53-98.broadband.corbina.ru.1687 > 81.176.227.133.www: P 1:591(590) ack 1 win 65535
02:36:52.975580 IP hdns1.corbina.net.domain > 89-178-53-98.broadband.corbina.ru.32780: 64581* 1/2/2 (171)
02:36:52.976111 IP 89-178-53-98.broadband.corbina.ru.32780 > hdns1.corbina.net.domain: 52671+ PTR? 8.192.234.213.in-addr.arpa. (44)
02:36:52.976714 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: . ack 591 win 6490
02:36:52.977304 IP hdns1.corbina.net.domain > 89-178-53-98.broadband.corbina.ru.32780: 52671* 1/2/2 (145)
02:36:52.978239 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: P 1:294(293) ack 591 win 6490
02:36:52.989669 IP 89-178-53-98.broadband.corbina.ru.1687 > 81.176.227.133.www: P 591:1208(617) ack 294 win 65242
02:36:52.999961 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: P 294:819(525) ack 1208 win 8021
02:36:53.000833 IP 89-178-53-98.broadband.corbina.ru.1687 > 81.176.227.133.www: P 1208:1849(641) ack 819 win 64717
02:36:53.044456 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: . ack 1849 win 8974
02:36:53.282513 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: P 819:1024(205) ack 1849 win 8974
02:36:53.283261 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: . 1024:2444(1420) ack 1849 win 8974
02:36:53.283325 IP 89-178-53-98.broadband.corbina.ru > 81.176.227.133: ICMP 89-178-53-98.broadband.corbina.ru unreachable - need to frag (mtu 1400), length 556
02:36:53.451939 IP 89-178-53-98.broadband.corbina.ru.1687 > 81.176.227.133.www: . ack 1024 win 64512
02:36:53.454041 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: . 2444:3864(1420) ack 1849 win 8974
02:36:53.454100 IP 89-178-53-98.broadband.corbina.ru > 81.176.227.133: ICMP 89-178-53-98.broadband.corbina.ru unreachable - need to frag (mtu 1400), length 556
02:36:53.454339 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: . 3864:5284(1420) ack 1849 win 8974
02:36:53.454375 IP 89-178-53-98.broadband.corbina.ru > 81.176.227.133: ICMP 89-178-53-98.broadband.corbina.ru unreachable - need to frag (mtu 1400), length 556
02:36:53.684853 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: . 1024:2444(1420) ack 1849 win 8974
02:36:53.684930 IP 89-178-53-98.broadband.corbina.ru > 81.176.227.133: ICMP 89-178-53-98.broadband.corbina.ru unreachable - need to frag (mtu 1400), length 556
02:36:54.140853 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: . 1024:2444(1420) ack 1849 win 8974
02:36:54.140944 IP 89-178-53-98.broadband.corbina.ru > 81.176.227.133: ICMP 89-178-53-98.broadband.corbina.ru unreachable - need to frag (mtu 1400), length 556
02:36:55.052826 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: . 1024:2444(1420) ack 1849 win 8974
02:36:55.052917 IP 89-178-53-98.broadband.corbina.ru > 81.176.227.133: ICMP 89-178-53-98.broadband.corbina.ru unreachable - need to frag (mtu 1400), length 556
02:36:56.876746 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: . 1024:2444(1420) ack 1849 win 8974
02:36:56.876860 IP 89-178-53-98.broadband.corbina.ru > 81.176.227.133: ICMP 89-178-53-98.broadband.corbina.ru unreachable - need to frag (mtu 1400), length 556
02:36:58.284630 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: . 5284:6704(1420) ack 1849 win 8974
02:36:58.284723 IP 89-178-53-98.broadband.corbina.ru > 81.176.227.133: ICMP 89-178-53-98.broadband.corbina.ru unreachable - need to frag (mtu 1400), length 556
02:36:58.284632 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: FP 6704:6720(16) ack 1849 win 8974
02:36:58.285042 IP 89-178-53-98.broadband.corbina.ru.1687 > 81.176.227.133.www: . ack 1024 win 64512 <nop,nop,sack 1 {6704:6721}>
02:37:00.524453 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: . 1024:2444(1420) ack 1849 win 8974
02:37:00.524545 IP 89-178-53-98.broadband.corbina.ru > 81.176.227.133: ICMP 89-178-53-98.broadband.corbina.ru unreachable - need to frag (mtu 1400), length 556
02:37:01.275420 IP 89-178-53-98.broadband.corbina.ru.microsoft-ds > 89.175.175.66.3516: P 19921899:19921903(4) ack 2007892841 win 17152
02:37:01.275952 IP 89-178-53-98.broadband.corbina.ru.32780 > hdns1.corbina.net.domain: 55801+ PTR? 66.175.175.89.in-addr.arpa. (44)
02:37:01.277108 IP hdns1.corbina.net.domain > 89-178-53-98.broadband.corbina.ru.32780: 55801 NXDomain 0/1/0 (106)
02:37:01.390220 IP 89.175.175.66.3516 > 89-178-53-98.broadband.corbina.ru.microsoft-ds: . ack 4 win 16560
02:37:07.819915 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: . 1024:2444(1420) ack 1849 win 8974
02:37:07.820016 IP 89-178-53-98.broadband.corbina.ru > 81.176.227.133: ICMP 89-178-53-98.broadband.corbina.ru unreachable - need to frag (mtu 1400), length 556
02:37:12.645543 IP 89-178-53-98.broadband.corbina.ru.1687 > 81.176.227.133.www: F 1849:1849(0) ack 1024 win 64512
02:37:12.647461 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: . ack 1850 win 8974
02:37:22.410751 IP 81.176.227.133.www > 89-178-53-98.broadband.corbina.ru.1687: . 1024:2444(1420) ack 1850 win 8974
02:37:22.410881 IP 89-178-53-98.broadband.corbina.ru > 81.176.227.133: ICMP 89-178-53-98.broadband.corbina.ru unreachable - need to frag (mtu 1400), length 556


>Маршрутизация - iptables

сильно задвинул, внушает.

gnomino
()
Вы не можете добавлять комментарии в эту тему. Тема перемещена в архив.