Joe said:
>Can you get someone else to plunk down their machine on the network
>there? Tunnel or no tunnel, you have to find which part isn't
>working before anyone can use it.
Here's two more traces. The first one is captured on the outside
interface (eth0) of the load balancer. The second is captured on the
inside interface (eth1) during the same conversation. Since both of
these are outside the tunnel, that should give us what we need.
www.pmcipa.com/downloads/tcpdump_lb_eth0.txt
www.pmcipa.com/downloads/tcpdump_lb_eth1.txt
These traces show the same behavior as we observed on the client and
server.
It seems to me that we already know what part is not working. When the
FTP server establishes the FTP-DATA connection, its packets are hitting
the inside interface of the load balancer and are simply being *routed*
instead being *NATed*.
--Eric
Disclaimer - December 24, 2006
This email and any files transmitted with it are confidential and intended
solely for LinuxVirtualServer.org users mailing list.. If you are not the named
addressee you should not disseminate, distribute, copy or alter this email. Any
views or opinions presented in this email are solely those of the author and
might not represent those of Physician Select Management (PSM) or Physician's
Managed Care (PMC). Warning: Although the message sender has taken reasonable
precautions to ensure no viruses are present in this email, neither PSM nor PMC
can accept responsibility for any loss or damage arising from the use of this
email or attachments.
|