Shot in the dark, but maybe ident?  Try forwarding port 113 (even if
it's not open on the mail server).  Then ident requests will get an ICMP
Dest-port-unreachable from the server instead of the ActionTec just
dropping them on the floor.

And Nate had a good suggestion about seeing if the data from lkml is
actually making it past the ActionTec - so check your mail logs or run
tcpdump and see if you're getting anything from them.


On Fri, 2004-03-12 at 09:31, Florin Iucha wrote:
> On Fri, Mar 12, 2004 at 09:14:10AM -0600, Nate Carlson wrote:
> > On Fri, 12 Mar 2004, Florin Iucha wrote:
> > > First of all thank you guys for the info on the 1.5 Mbps DSL. I just got
> > > it and it works great!
> > > 
> > > Well, almost...
> > > 
> > > I NAT-ed ports 22, 25 and 80 to my internal box. So far so good. I
> > > started getting mail from the lists I am subscribed to, except LKML.=20
> > > When I try a portscan of my domain (iucha.net) from the office, I get
> > > only ports 22 and 80 open.=20
> > > 
> > > Telnet 25 from my office SUN machine fails with "connection timeout".
> > > Telnet 25 from my office Windows2k machine succeeds. Ssh from my office
> > > Windows2k machine fails with "connection timeout".
> > > 
> > > I tried testing with http://vger.kernel.org/mxverify.html. The first two
> > > fail with "connection timeout", the third one succeeds!
> > > 
> > > What's up? What should I do?
> > 
> > Do you have ECN turned on?
> 
> I suppose I do. If I do a
>    echo 0 > /proc/sys/net/ipv4/tcp_ecn
> I can browse to http://vger.kernel.org. If I write 1, I cannot.
> 
> I was getting lkml fine before the switch (Cisco675/CAP ->
> Actiontec1524/DMT). I have the same ISP/public IP. I didn't even
> reboot the internal mail server.
> 
> > One good thing to do would be put a hub between your Linux box and the 
> > Actiontec, put another Linux box on that hub, and run Ethereal or tcpdump. 
> > This will let you see if the Actiontec is actually passing the traffic or 
> > not.
> 
> I will try to do that. What puzzles me is that I get (some) mail; I get
> tclug just fine. I might be losing some that I am not aware of, but I
> am aware of LKML ;)
> 
> Thank you,
> florin


_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
http://www.mn-linux.org tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list