Date: Tue, 24 Nov 1998 13:26:31 +0100 (MET) From: Luigi Rizzo <luigi@labinfo.iet.unipi.it> To: alden@math.ohio-state.edu (Dave Alden) Cc: freebsd-net@FreeBSD.ORG Subject: Re: bridging hints? Message-ID: <199811241226.NAA05659@labinfo.iet.unipi.it> In-Reply-To: <19981123133825.A5023@zaphod.mps.ohio-state.edu> from "Dave Alden" at Nov 23, 98 01:38:06 pm
next in thread | previous in thread | raw e-mail | index | archive | help
> That's what I'm trying to do. :-) What I meant by "client" was that I > set "firewall_type" to "client" in rc.conf. > It doesn't make a difference. I've gotten a little bit further. Here's my > setup: > > Hub_1 > | | > A Hub_2 > | | | > B C D > | > E > ... > If I telnet from B to E, I get the following syslog'ed on D: > > Nov 23 13:04:54 D /kernel: ipfw: 100 Deny TCP B:1114 E:23 out via fxp1 > > Which is what I'd expect. If I telnet from C (or A) to E, I get the > following syslog'ed on D: > > ipfw: 200 Accept TCP C E out via fxp1 Fragment = 64 > ipfw: 200 Accept TCP C E out via fxp1 Fragment = 64 > ipfw: 200 Accept TCP C E out via fxp1 Fragment = 64 > ipfw: 200 Accept TCP C E out via fxp1 Fragment = 64 > Nov 23 13:06:23 D /kernel: ipfw: 200 Accept TCP C E out via fxp1 Fragment = 64 > > I ran snoop (Solaris packet sniffer) and as far as I can tell, the packets > coming from C (and A) are not fragmented. Have I misconfigured something? > Any ideas? Help? :-) it is really curious that B and C behave differently. Do you have a tcpdump/snoop output to see what options are carried by the packets ? luigi > ps I'm running 2.2.7-stable -- should I be running 2.2-current? there is no 2.2-current, -current is on the 3.0 branch and there is no bridging in that branch (yet) luigi To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199811241226.NAA05659>