Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 21 Nov 1998 15:45:01 +0100 (CET)
From:      N <niels@bakker.net>
To:        FreeBSD isp <freebsd-isp@FreeBSD.ORG>
Subject:   Re: ICMP firewall entry?
Message-ID:  <981121154330.18418B-100000@liquid.tpb.net>
In-Reply-To: <199811202057.NAA15805@mt.sri.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 20 Nov 1998, Nate Williams wrote:

> I'm not using any private IP addresses, and if my masks were wrong
> nothing would get through.  Almost everything gets through, but only
> certain WWW sites don't work.

Are you blocking ICMP traffic?  This could be a Path MTU Discovery problem
(if ICMP fragmentation needed packets don't get through, the host won't
 stop sending large packets with the DF bit set, which'll get dropped
 because they have the DF bit set).

> If it were a simple configuratino issue I wouldn't have posted to the
> list.  It may be an issue with my firewall and ICMP source routing, or
> it may be something else completely different.


	-- Niels.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?981121154330.18418B-100000>