From owner-freebsd-current@FreeBSD.ORG Mon Aug 20 08:48:03 2007 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0881116A417 for ; Mon, 20 Aug 2007 08:48:03 +0000 (UTC) (envelope-from dwmalone@maths.tcd.ie) Received: from salmon.maths.tcd.ie (salmon.maths.tcd.ie [IPv6:2001:770:10:300::86e2:510b]) by mx1.freebsd.org (Postfix) with SMTP id DFE2513C457 for ; Mon, 20 Aug 2007 08:48:01 +0000 (UTC) (envelope-from dwmalone@maths.tcd.ie) Received: from walton.maths.tcd.ie ([134.226.81.10] helo=walton.maths.tcd.ie) by salmon.maths.tcd.ie with SMTP id ; 20 Aug 2007 09:48:00 +0100 (BST) Date: Mon, 20 Aug 2007 09:47:59 +0100 From: David Malone To: Anish Mistry Message-ID: <20070820084759.GA65560@walton.maths.tcd.ie> References: <200708191147.10340.amistry@am-productions.biz> <20070819191647.GA59444@walton.maths.tcd.ie> <200708191751.23094.amistry@am-productions.biz> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200708191751.23094.amistry@am-productions.biz> User-Agent: Mutt/1.5.6i Sender: dwmalone@maths.tcd.ie Cc: freebsd-current@freebsd.org Subject: Re: Can't create TCP connections to certain IP addresses X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Aug 2007 08:48:03 -0000 On Sun, Aug 19, 2007 at 05:51:14PM -0400, Anish Mistry wrote: > I'm not sure how to do that with the version of m0nowall that the > router is running. But I can exhibit this behavior on the local LAN > without going through the router. In that case, run a tcpdump on both ends and see if the SYN packet is arriving at the far end. You might also want to try using "tcpdump -s0 -v" to check the checksums on the packets (though they can't always be trusted on the packet's sender if the network card supports checksum offloading). David.