Hi all,
No go it seems. I ran this command on my director:
iptables -A OUTPUT -s <VIP> -p tcp
-m tcp --tcp-flags SYN,RST,ACK SYN,ACK -j TCPMSS --set-mss 1440
And the POST test in the HOWTO still returns "bad request" in the browsers.
What next?
Thanks,
-Matthew
Joseph Mack NA3T wrote:
On Wed, 3 Jan 2007, Matthew wrote:
Joe,
properly. After you change the max packet size for packets from the
director to the Tun realserver, then the client will be sent a "needs
fragmenting" icmp packet.
To clarify, does this mean I need to execute some command on the
director? Or do I only apply the iptable rule on the real servers?
director
Joe
|