Topic: Unmasked local address with https ???

[jibe]

Hi,

I have a problem with a 6.0.1 server used as internet gateway : I cannot access sites through https. http is working fine, as well as https with lynx on the server. It's only on client station (windows 98SE and XP Pro with Firefox 0. that the problem appears : I just get a time out message.

tcpdump reports something I guess wrong :

16:39:04.722579 192.168.1.16.1418 > 217.70.177.41.https: S 28969441:28969441(0) win 8192 <mss 1460,nop,nop,sackOK> (DF)

  My local address appears !

The only changes I did on this server is to install
e-smith-multipop-0.1-4.noarch.rpm and mailfilter-0.4.0-1.i386.rpm. I don't see any relation...

Any idea or suggestion ?
thx.

[jibe]

Hi,

I had a try with another server, with the same contribs installed. All goes fine !

Indeed, I (I don't think it's somebody else...) did something wrong... But I don't see what. I compared the firewall rules (obtained with iptables -L) of the two servers and they are the same...

Has somebody an idea or an advice ? How could I find what goes wrong ?

[jibe]

Hi,

I took the server in my office, and had a try with a V90 modem. All works fine. Then, I brought it back and changed :

[list=1]

• IP address (192.168.1.2 at home, 192.168.1.1 for my client).
• Modem connection (ttyS0 for my modem, ISDN card ttyI0 for my client)
• Phone number of the ISP (first 0 to get the phone line with the ISDN connection, no 0 for 56K modem).
[/list:o]

And tcpdump shoes unmasked addresses for outgoing requests...

I suspect a bug with the ISDN configuration.

Am I right ? Could somebody help me to solve this ? I know SME 5.5 and ipchains, but not SME 6.01 and iptables...

Thanks in advance.

[smeghead]

There is a known issue with the ISDN config scripts - a search here for ISDN will give you a heads up on the prob and the solution.

[jibe]

Thanks for your help, smeghead !

I found this topic talking exactly about the same problem I have. But I tried to set up the proxy, and nothing better happened.

I found also several topics and documents saying that internal ISDN cards are not supported. But my Elsa microlink ISDN PCI seems to be known by the server and works fine for the mails and http. However, I just discovered that I have also problems with ftp...

Must I try the solutions given for unknown ISDN internal cards ? I didn't found anybody solving the same problem as me this way... Or did I badly search ?

Thx.

[jibe]

Hi,

Finally, I found this bug report and this other one. I worry why in my case, squid doesn't give a solution. But I can confirm that there is no bad configuration : I tried with a V90 Modem, all works. I just change the modem for an ISDN card on the server, reconfigure the few necessary things, and Https is no more working, neither FTP.

I saw in the 00000051 bug report that the problem began to be located, but no solution yet ?

[jibe]

Hi,

I really don't know anymore what to think... Unresolved bug or bad configuration ?

Please, could somebody tell me his opinion ?

[jibe]

Hello,

I just learned something very strange : one told me that https is working with Internet Explorer but not with Mozilla...

Very strange because this info is probably true, but it's effectively linked with an ISDN connection and an internal modem...