I have the same problem, mss clamp isnt working.

I dont know which i have kernal or user, i just did aptitude install pppoe pppoeconf on a up to date etch box.

then at the mss clamp pppoeconf dialog i said yes, clamp to 1452. However the dsl-provider file did not uncommment any of the pppoe lines as it says it should in
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=425448

8<--------------------------------
#pty "pppoe -I eth0 -T 80"
pty "pppoe -I eth0 -T 80 -m 1452"
#pty "pppoe -I eth0 -T 80 -m 1412"
8<--------------------------------

Nor does it add any pppoeconf adjust '-m MSS' to provider file.

" When you use pppoe support in the kernel
(like you), pppoeconf add an iptables rule in your
/etc/ppp/ip-up.d/0clampmss file. "

This file exists but does not appear to be invoked anywhere.

find /etc -name '*clamp*'
/etc/ppp/ip-down.d/0clampmss
/etc/ppp/ip-up.d/0clampmss

grep '0clampmss' /etc -r

nada

grep '1452' /etc -r

/etc/ppp/peers/dsl-provider:#pty "/usr/sbin/pppoe -I eth0 -T 80 -m 1452"
/etc/ppp/peers/dsl-provider:# don't work using -m 1452...

more nada
iptables -L FORWARD -vn
Chain FORWARD (policy ACCEPT 4208 packets, 933K bytes)
 pkts bytes target    prot opt in   out  source      destination
 9467 4393K Accounting 0   --  *    *   0.0.0.0/0    0.0.0.0/0
 5259 3460K ACCEPT     0  --  ppp0  *   0.0.0.0/0     0.0.0.0/0  state   
RELATED,ESTABLISHED
    0     0 ACCEPT     tcp  --  ppp0   *  0.0.0.0/0     0.0.0.0/0      tcp 
dpt:18802 state NEW
    0     0 Firewall   0    --  ppp0   *   0.0.0.0/0      0.0.0.0/0     state 
INVALID,NEW


How do i tell which mode im using?
Is the package broken or did i use it wrong?

And could the man page be clearer about mss, the two references seem to 
conflict, one says (vaguely) about using mss and further down the other says 
you should change your lan clients aswell. mss is a hack but seems to be a 
necessary evil with pppoe.

Lastly is there a definitive pppoe on debian howto any place?

Thanks

Peter







--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to