[问题求助]PPTP 的问题.奇怪(一些网页无法打开) [已解决 MTU] [复制链接]

家的.环境中国电信ADSL,我在家里拔到公司的VPN(PPTP),可以拔上成功,.也能上一般的网页/也可以上QQ/FTP等             电子

但就是奇怪上淘宝(http://www.taobao.com/),上建设银行网站打不开,一直停在"正在打开网页",MSN也是无法灯录,MSN上网络连接的测试项里测试是可以成功连接的,但是就是连接不上.断掉VPN就可以.    健康

奇怪了!!问题出在那里呢?.(V.Pn端的iptables规则没有问题的)电影

[. 本帖最后由 枫影谁用了 于 2007-8-12. 17:19 编辑 ]    健康

到vpn专区看看是不是和那个关于mtu的精华贴相关。
http://bbs2.chinaunix.net/viewth ... p%3Bfilter%3Ddigest

[ 本帖最后由 i770880 于 2007-8-12 17:01 编辑 ]

整个MSN灯录的过程抓包结果: 10.0.0.2是VPN客户端IP.


QUOTE:[root@nat ~]# tethereal  -i ppp1
Capturing on ppp1
  0.000000 65.54.183.203 -> 10.0.0.2     SSLv3 Change Cipher Spec, Encrypted Handshake Message
  0.032215     10.0.0.2 -> 65.54.183.203 SSLv3 Application Data
  0.059202     10.0.0.2 -> 65.54.183.203 TCP [TCP segment of a reassembled PDU]
  0.084774     10.0.0.2 -> 65.54.183.203 TCP [TCP segment of a reassembled PDU]
  0.100147     10.0.0.2 -> 65.54.183.203 SSLv3 Application Data
  0.215851 207.46.28.93 -> 10.0.0.2     TCP 1863 > 3223 [ACK] Seq=0 Ack=0 Win=65391 Len=0
  0.239521 207.46.111.17 -> 10.0.0.2     TCP 1863 > 3226 [SYN, ACK] Seq=0 Ack=0 Win=16384 Len=0 MSS=1412
  0.258593     10.0.0.2 -> 207.46.111.17 TCP 3226 > 1863 [ACK] Seq=0 Ack=1 Win=65535 Len=0
  0.263237     10.0.0.2 -> 207.46.111.17 MSNMS VER 59 MSNP15 MSNP14 MSNP13 CVR0
  0.507377 65.54.183.203 -> 10.0.0.2     SSLv3 Application Data
  0.591549 65.54.183.203 -> 10.0.0.2     TCP https > 3225 [ACK] Seq=113 Ack=4139 Win=65535 Len=0
  0.636761 65.54.183.203 -> 10.0.0.2     SSLv3 Application Data
  0.654606     10.0.0.2 -> 65.54.183.203 TCP 3225 > https [ACK] Seq=4139 Ack=546 Win=65535 Len=0
  0.699515 207.46.111.17 -> 10.0.0.2     MSNMS VER 59 MSNP15 MSNP14 MSNP13 CVR0
  0.718805     10.0.0.2 -> 207.46.111.17 MSNMS CVR 60 0x0804 winnt 5.1 i386 MSG80BETA 8.5.1235 msmsgs jabincn@hotmail.com
  1.155092 207.46.111.17 -> 10.0.0.2     MSNMS CVR 60 8.1.0178 8.1.0178 8.1.0178 http://msgruser.dlservice.micros ... stall_Messenger.exe http://get.live.com/cn
  1.329618     10.0.0.2 -> 207.46.111.17 TCP 3226 > 1863 [ACK] Seq=144 Ack=207 Win=65329 Len=0
10.423073 61.164.54.30 -> 10.0.0.2     TCP http > 3218 [RST] Seq=0 Len=0
10.438287     10.0.0.2 -> 61.164.54.30 TCP 3218 > http [ACK] Seq=0 Ack=4294964576 Win=65535 Len=0
30.695119     10.0.0.2 -> 65.54.183.203 TCP 3225 > https [FIN, ACK] Seq=4139 Ack=546 Win=65535 Len=0
31.161881 65.54.183.203 -> 10.0.0.2     TCP [TCP Previous segment lost] https > 3225 [ACK] Seq=1906 Ack=4140 Win=65535 Len=0
31.812162 202.108.22.43 -> 10.0.0.2     TCP http > 3210 [FIN, ACK] Seq=0 Ack=0 Win=2496 Len=0
31.831402     10.0.0.2 -> 202.108.22.43 TCP 3210 > http [ACK] Seq=0 Ack=1 Win=65149 Len=0
31.833624     10.0.0.2 -> 202.108.22.43 TCP 3210 > http [FIN, ACK] Seq=0 Ack=1 Win=65149 Len=0
31.869638 202.108.22.43 -> 10.0.0.2     TCP http > 3210 [ACK] Seq=1 Ack=1 Win=2496 Len=0
53.141908 65.54.183.203 -> 10.0.0.2     TCP https > 3220 [RST, ACK] Seq=0 Ack=0 Win=0 Len=0
53.159912     10.0.0.2 -> 65.54.183.203 TCP 3220 > https [ACK] Seq=0 Ack=4294960496 Win=65535 Len=0
53.629458 65.54.183.203 -> 10.0.0.2     TCP https > 3220 [RST, ACK] Seq=4294960496 Ack=0 Win=0 Len=0
60.265237     10.0.0.2 -> 207.46.111.17 TCP 3226 > 1863 [FIN, ACK] Seq=144 Ack=207 Win=65329 Len=0
60.701224 207.46.111.17 -> 10.0.0.2     TCP [TCP Previous segment lost] 1863 > 3226 [ACK] Seq=1567 Ack=145 Win=65391 Len=0
70.274009 65.54.183.203 -> 10.0.0.2     TCP https > 3225 [RST, ACK] Seq=7346 Ack=4140 Win=0 Len=0
70.289797     10.0.0.2 -> 65.54.183.203 TCP [TCP Dup ACK 20#1] 3225 > https [ACK] Seq=4140 Ack=546 Win=65535 Len=0
70.755252 65.54.183.203 -> 10.0.0.2     TCP https > 3225 [RST, ACK] Seq=546 Ack=4140 Win=0 Len=0

QUOTE:原帖由 i770880 于 2007-8-12 16:48 发表
到vpn专区看看是不是和那个关于mtu的精华贴相关。

有可能!我查查看.回头说出结果

QUOTE:原帖由 i770880 于 2007-8-12 16:48 发表
到vpn专区看看是不是和那个关于mtu的精华贴相关。
http://bbs2.chinaunix.net/viewth ... p%3Bfilter%3Ddigest


Thank You!

解决了!确实是mtu问题!

我尝试在pptp里增加设定mtu为1492,但是用户端连接上后还是1396!

后来在VPM版找到前人讲的.这样改就可以了.



QUOTE:/sbin/iptables -I FORWARD -p tcp --syn -i ppp+ -j TCPMSS --set-mss 1356