From owner-freebsd-questions  Thu Sep 21  8:50:16 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from nw177.netaddress.usa.net (nw177.netaddress.usa.net [204.68.24.77])
	by hub.freebsd.org (Postfix) with SMTP id CA63437B423
	for <freebsd-questions@FreeBSD.ORG>; Thu, 21 Sep 2000 08:50:13 -0700 (PDT)
Received: (qmail 24209 invoked by uid 60001); 21 Sep 2000 15:50:12 -0000
Message-ID: <20000921155012.24208.qmail@nw177.netaddress.usa.net>
Received: from 204.68.24.77 by nw177 for [205.161.188.115] via web-mailer(34FM.0700.4.03) on Thu Sep 21 15:50:12 GMT 2000
Date: 21 Sep 00 09:50:12 CST
From: Eduardo Huertas <eduhuertas@usa.net>
To: freebsd-questions@FreeBSD.ORG
Subject: ppp -auto -nat myisp
X-Mailer: USANET web-mailer (34FM.0700.4.03)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Hello everybody!

I've been having problems working with ppp -auto -nat myisp

Everything works fine except that ppp dials unexpectedly.

I read the ppp FAQ and I found this problem there. It says that to determ=
ine
the cause use the following line:

set log  +tcp/ip

I certainly did and I got this cause from the log:

Sep 21 09:13:03 BSDincep ppp[3291]: tun0: Phase: PPP Started (auto mode).=

Sep 21 09:18:17 BSDincep ppp[3291]: tun0: TCP/IP: DIAL UDP: 10.0.0.1:138 =
--->
10.0.0.255:138
Sep 21 09:18:17 BSDincep ppp[3291]: tun0: Phase: bundle: Establish
Sep 21 09:18:17 BSDincep ppp[3291]: tun0: Phase: deflink: closed -> openi=
ng
Sep 21 09:18:17 BSDincep ppp[3291]: tun0: TCP/IP: OUT UDP: 10.0.0.1:138 -=
-->
10.0.0.255:138
Sep 21 09:18:17 BSDincep ppp[3291]: tun0: Phase: deflink: Connected!
Sep 21 09:18:17 BSDincep ppp[3291]: tun0: Phase: deflink: opening -> dial=


The second line seems to tell me that the dial triggers from an UDP packe=
t
with ip addresses that are not used in my LAN (192.168.1.255)

Who is doing that? And how can I make the dial filter to deny this.  I tr=
ied
the following with no result:

# We don't want ICMPs to cause a dialup:
    set filter dial 0 deny icmp
    set filter dial 1 permit 0 0
#
# or any TCP SYN or RST packets (badly closed TCP channels):
#
    set filter dial 2 deny 0 0 tcp syn finrst
    set filter dial 3 deny 10.0.0.1 10.0.0.255

Thank you very much for your help.

Eduardo Huertas

____________________________________________________________________
Get free email and a permanent address at http://www.netaddress.com/?N=3D=
1


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message