Date: Fri, 10 Sep 2004 22:40:47 +0200 From: Nagilum <freebsd@nagilum.org> To: "freebsd-questions@FreeBSD. ORG" <freebsd-questions@FreeBSD.ORG> Subject: something fishy with this network Message-ID: <4142114F.80709@nagilum.org>
next in thread | raw e-mail | index | archive | help
Hi, I have a really strange network problem and no idea what's the cause, maybe someone else can enlighten me..so here it comes: I have a FreeBSD5.3b3 gateway, this machine is NAT gateway, Webserver, DHCP and nameserver for the LAN, Mailserver, Samba, et al.. In my LAN I have a PC and a Powerbook, both configured via DHCP from the gateway. Everything works fine except I can't access certain hosts in the internet from the Powerbook or the gateway, the most famous being slashdot.org (www.clamav.net is another one). I can access other hosts without problems but from some I just don't get anything. The really strange thing is that I can access them from the PC (via NAT) running Win2k, but not from the same machine running FreeBSD or Linux. It also doesn't work from the Powerbook running MacOS-X 10.3.5, but I know it's not the browser or anything in the Powerbook because if it works if I plug the Powerbook directly into the modem. It doesn't even work on the gateway itself, so a proxy wouldn't help. The name resolution works fine, I can traceroute to the hosts on the gateway and even ping them. It seems to me as if there is something blocking the responses, when I try it with lynx all I see is "HTTP request sent; waiting for response." but doesn't that mean, that the TCP handshake was already successful? Everything was working fine back with 5.2, so I'm pretty sure it's something with my gateway, but what? (No I don't remember any particular change that could cause that) I don't see anything special in the logs and I don't think I blocked anything. I don't think it's the fault of the packet filter pf, since it does not work from the gateway itself either, but just in case, here is my pf.conf (but it really can't be it, since there is no os-specific filtering in it): http://www.nagilum.org/pf.conf It's more likely to be something with my kernel so here is my kernel config: http://www.nagilum.de/cakebox If I knew what else it could be I would put it up there but it just doesn't fit... This is quite a mystery to me so any hints would be helpful, Thanks in advance, Alex.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4142114F.80709>