From owner-freebsd-questions Fri May 26 8:23:40 2000 Delivered-To: freebsd-questions@freebsd.org Received: from whale.sunbay.crimea.ua (sunbay-10BASE-T.cris.net [212.110.130.67]) by hub.freebsd.org (Postfix) with ESMTP id 351BF37B836 for ; Fri, 26 May 2000 08:23:04 -0700 (PDT) (envelope-from ru@whale.sunbay.crimea.ua) Received: (from ru@localhost) by whale.sunbay.crimea.ua (8.9.3/1.13) id SAA98168; Fri, 26 May 2000 18:22:13 +0300 (EEST) Date: Fri, 26 May 2000 18:22:13 +0300 From: Ruslan Ermilov To: Dirk GOUDERS Cc: Glen Gross , freebsd-questions@freebsd.org Subject: Re: ping -R Message-ID: <20000526182213.A97836@sunbay.com> Mail-Followup-To: Dirk GOUDERS , Glen Gross , freebsd-questions@freebsd.org References: <20000526100253.D82793@sunbay.com> <200005260828.KAA00484@musashi.et.bocholt.fh-ge.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <200005260828.KAA00484@musashi.et.bocholt.fh-ge.de>; from hank@et.bocholt.fh-gelsenkirchen.de on Fri, May 26, 2000 at 10:28:21AM +0200 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Fri, May 26, 2000 at 10:28:21AM +0200, Dirk GOUDERS wrote: > > > You probably have your firewall blocking IP packets with record-route > > option, do not you? > > I use a firewall, yes. > But, even if I delete all rules except the default one > > 65535 allow ip from any to any > > ``ping -R'' will not work. > > Having read your remark I got ``ping -R'' working - but only after > having removed any firewall options from my kernel configuration > file. > > # > # Firewall stuff > # > #options IPFIREWALL # firewall > #options IPFIREWALL_VERBOSE # print information about > #options "IPFIREWALL_VERBOSE_LIMIT=1" # limit verbosity > #options IPFIREWALL_DEFAULT_TO_ACCEPT # allow everything by default > #options IPFILTER # kernel ipfilter support > #options IPFILTER_LOG # ipfilter logging > #options IPDIVERT # divert sockets > > The manual page says that ipfw will always discard IP fragments with > fragment offset of one but that should not affect packets sent by > ``ping -R'' - doesn't it? > I do not know what kind of firewall your were using, ipfirewall(4) or ipf(4). The ipfirewall(4) does not discard RR packets by default. But I do not know if this is also true for ipf(4). Cheers, -- Ruslan Ermilov Oracle Developer/DBA, ru@sunbay.com Sunbay Software AG, ru@FreeBSD.org FreeBSD committer, +380.652.512.251 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message