From owner-freebsd-net  Fri Sep  7 12:25:48 2001
Delivered-To: freebsd-net@freebsd.org
Received: from InterJet.elischer.org (c421509-a.pinol1.sfba.home.com [24.7.86.9])
	by hub.freebsd.org (Postfix) with ESMTP id E312137B403
	for <freebsd-net@freebsd.org>; Fri,  7 Sep 2001 12:25:44 -0700 (PDT)
Received: from localhost (localhost.elischer.org [127.0.0.1])
	by InterJet.elischer.org (8.9.1a/8.9.1) with ESMTP id MAA35177;
	Fri, 7 Sep 2001 12:42:45 -0700 (PDT)
Date: Fri, 7 Sep 2001 12:42:45 -0700 (PDT)
From: Julian Elischer <julian@elischer.org>
To: Thibault Bautze <rws_pd@gmx.de>
Cc: freebsd-net@freebsd.org
Subject: Re: nat problems
In-Reply-To: <002101c137cd$f9a5caa0$817b7b7b@my.network.net>
Message-ID: <Pine.BSF.4.21.0109071241380.34932-100000@InterJet.elischer.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-net.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-net>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-net>
X-Loop: FreeBSD.org



On Fri, 7 Sep 2001, Thibault Bautze wrote:
> 
> I found that you cannot ping this sites, even if I'm sitting on the firewall
> or connectet with my
> windows box directly to the internet.
> Here is the result for a ping:
> 
> # ping www.gmx.de
> PING www.gmx.de (213.165.65.100): 56 data bytes
> 36 bytes from 62.156.128.226: Communication prohibited by filter
> Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
>  4  5  00 5400 00ff   0 0000  fa  01 8d4c 217.1.yy.xx  213.165.65.100
> --- www.gmx.de ping statistics ---
> 16 packets transmitted, 0 packets received, 100% packet loss
> 
> 62.156.128.226 is in this case the other side of the ppp tunel, my ISP (
> t-online,
> Germany if it can help )
> 
> But I'm not sure if it makes a difference, if you can ping them or not. I
> got
> the same result with ping www.microsoft.com ( bad example, I know ; ) ) ,
> but I can open this site on my
> freebsd or windows box.

It makes a difference because the firewall is blocking ICMP which is used
to allow the maximum packet size negotiation.

> 
> 
> Thanks,
>  Thibault Bautze
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-net" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message