nat problem, web in XP too slow

jonatito · 03-08-2006, 04:36 PM

Hello
i have two machines, suse and xp. I'm using iptables to natting from my linux and from xp i can enter google, even display resluts of searches, but when i try to access some sites, like hotmail or some others, is like i hasn't internet connection. In suse everything's OK. Somebody can help me solve the problem?

Also i can't connect messenger form xp. This is the script i'm using, and EVERYTHING is permitted.

Code:

$IPTABLES -P INPUT ACCEPT
$IPTABLES -F INPUT
$IPTABLES -P OUTPUT ACCEPT
$IPTABLES -F OUTPUT
$IPTABLES -P FORWARD ACCEPT
$IPTABLES -F FORWARD
$IPTABLES -t nat -F

echo "   FWD: Allow all connections OUT and only existing and related ones IN"
$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -j ACCEPT
$IPTABLES -A FORWARD -i $INTIF -o $EXTIF -j ACCEPT
$IPTABLES -A FORWARD -j LOG

echo "   Enabling SNAT (MASQUERADE) functionality on $EXTIF"
$IPTABLES -t nat -A POSTROUTING -o $EXTIF -j MASQUERADE

Thanks

Half_Elf · 03-08-2006, 05:15 PM

Just a suggestion, have you tried to use some debug tools to monitor the network connection on your suse box?
I suggest that you try first with "iptraf", it's a nice ncurse based tools that help to solve simple network problem. Just listen to your internet interface using it and try to access a site from the windoze box. You will see if the http request at least come back to your suse box.
Tcpdump is also a very good debugging tool, thus a bit more complex (but more powerful).

Also i can't connect messenger form xp.
I have the same problem here... I suspect the problem to be Micro$oft fault.
Since the version 7 of MSN messenger, it seems to bug when you are using NAT. I blame Micro$oft's bad network protocol. For some reason, MSN try to talk using a random port on the 30 000 range and so the NAT fail to send it back to your box. MSN version 6 wasn't using that stupid network trick, so everything was fine.
I heard the very latest (beta?) version of MSN 7 is fixing that silly bug, or you could maybe downgrade to MSN 6 (or to use any MSN clone? Amsn work fine trought NAT).