From owner-freebsd-isp Thu Sep 19 19: 1:44 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1404F37B401 for ; Thu, 19 Sep 2002 19:01:43 -0700 (PDT) Received: from www.golsyd.net.au (golsyd.net.au [203.57.20.1]) by mx1.FreeBSD.org (Postfix) with ESMTP id 783FB43E42 for ; Thu, 19 Sep 2002 19:01:42 -0700 (PDT) (envelope-from kaltorak@quake.com.au) Received: from [210.49.77.192] by www.quake.com.au (NTMail 4.30.0012/AB6169.63.5324aadf) with ESMTP id dxnhaaaa for ; Fri, 20 Sep 2002 12:02:09 +1000 Message-ID: <3D8A817C.7040009@quake.com.au> Date: Fri, 20 Sep 2002 12:01:32 +1000 From: Kal Torak Organization: Quake Networking User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9.9) Gecko/20020311 X-Accept-Language: en-us, en MIME-Version: 1.0 To: FreeBSD ISP Subject: Problems with tcp packets and ipfw fwd rules Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi all.. I have a freebsd system working as the gateway router at this site, it has two upstream links and Im doing some very simple forwarding on it... One link is set as the default route and the majority of traffic heads out that.. I then use the ipfw fwd rule to use the other link for traffic from certain hosts and to certain hosts.. This all works fine, except for with most tcp connections... For instance browsing most web sites fail to load (tho some work strangly enough maybe thats just the cache..) Im thinking maybe this is some kind of mtu issue perhaps? I say this because looking with tcpdump the packets all seem to go and come back, but the pages never load... Then again maybe tcp connections just dont work with fwd? Any ideas of what is causing this problem?? And what to do to solve it? Thanks! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message