Internet Banking

[Ross]

Setup: Windows 2000 Professional, Telkom USB Marconi ADSL, Internet connection Sharing enabled, networked to 3 Windows XP Pro Systems.

Problem: XP Systems cannot see secure banking pages, ie, Absa can be Logged into from 2000 system, but not from anywhere else on the network.

There is no firewall, proxy at present. Running NAV 2003.

Has anyone come across this and have a solution. New to ADSL, used to have ISDN and all worked well.

Ross Matthews

 

[doekvoet]

Same problem this side.

I have not tried this, but I have been told the RASPPPoE client on the main PC (win200 machine)will slove this problem, i.e you first have to delete the PPPoE client provided with the Telkom USB modem. I can email it to you - 1Meg file

 

[Ross]

Have downloaded RasPPPoE. Tried installing it and now get an error when connecting. Basically error msg is, you have been disconnected because systems cannot decide on which PPP protocol to use.



Ross Matthews

 

[loosecannon]

ok what must be done is set MSS/MTU on the network [ i do this on a linux gateway]

in pppoe settings you can change this on all pc's as well 1450 is what i normaly use ...

 

[doekvoet]

You first have to delete the PPPoE client which you installed from the Telkom disk - and then install the RASPPPoE client

I know RASPPPoE works as I used it on my previous PC

 

[Deckert]

loosecannon: I set my MTU to 1492 (the max value) since the overhead of PPPoE is only 8 bytes. Works very well - I just had to set my MTU to 1492 on my Win2k machines because of Telkom's braindead filtering of ICMP to their NNTP server which also blocks ICMP DF fragment requests.

I use the Linux 2.4.x kernel native support for PPPoE with pppd 2.4.2. From your previous posts, I know you also use this configuration.

There's an excellent explanation of the issue (and it's solutions) here:
http://en.tldp.org/HOWTO/IP-Masquerade-HOWTO/mtu-issues.html

--deckert

 

[loosecannon]

yip Deckert that is what i use however some routers / nodes are full of it and the MTU needs to be lower the early netgear routers are guilty of this as is sintech ...

that is why i use a more comservative MTU but when you using internet con shareing and the like on winblows the pppoe protocol needs to be adjusted due to icmp been blocked (MTU path discovery)

on linux the easiest way to do this is clamp MSS to MTU as follows ...

/sbin/iptables -A FORWARD -j TCPMSS -p tcp --tcp-flags SYN,RST SYN --clamp-mss-to-pmtu