From owner-freebsd-questions  Sat May 27 15:29:53 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from mail1.rdc3.on.home.com (mail1.rdc3.on.home.com [24.2.9.40])
	by hub.freebsd.org (Postfix) with ESMTP id BF34537B55D
	for <freebsd-questions@FreeBSD.ORG>; Sat, 27 May 2000 15:29:49 -0700 (PDT)
	(envelope-from pnmurphy@home.com)
Received: from home.com ([24.42.55.28]) by mail1.rdc3.on.home.com
          (InterMail vM.4.01.02.00 201-229-116) with ESMTP
          id <20000527222948.STKL416.mail1.rdc3.on.home.com@home.com>;
          Sat, 27 May 2000 15:29:48 -0700
Message-ID: <39304C5C.80CEBA1A@home.com>
Date: Sat, 27 May 2000 18:29:48 -0400
From: Paul Murphy <pnmurphy@home.com>
X-Mailer: Mozilla 4.7 [en] (Win98; U)
X-Accept-Language: en
MIME-Version: 1.0
To: Dirk GOUDERS <hank@et.bocholt.fh-gelsenkirchen.de>
Cc: Ruslan Ermilov <ru@sunbay.com>, Glen Gross <ggross@symark.com>,
	freebsd-questions@FreeBSD.ORG
Subject: Re: ping -R
References: <200005260828.KAA00484@musashi.et.bocholt.fh-ge.de>
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Dirk GOUDERS wrote:
> 
>  > You probably have your firewall blocking IP packets with record-route
>  > option, do not you?
> 
> I use a firewall, yes.
> But, even if I delete all rules except the default one
> 
> 65535 allow ip from any to any
> 
> ``ping -R'' will not work.
> 
> Having read your remark I got ``ping -R'' working - but only after
> having removed any firewall options from my kernel configuration
> file.
> 
> #
> # Firewall stuff
> #
> #options         IPFIREWALL                      # firewall
> #options         IPFIREWALL_VERBOSE              # print information about
> #options         "IPFIREWALL_VERBOSE_LIMIT=1"    # limit verbosity
> #options         IPFIREWALL_DEFAULT_TO_ACCEPT    # allow everything by default
> #options         IPFILTER                        # kernel ipfilter support
> #options         IPFILTER_LOG                    # ipfilter logging
> #options         IPDIVERT                        # divert sockets
> 
> The manual page says that ipfw will always discard IP fragments with
> fragment offset of one but that should not affect packets sent by
> ``ping -R'' - doesn't it?
> 
> Dirk
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message

'ping -R' works for me with firewall (type=open).
-- 
Paul Murphy
http://members.home.com/pnmurphy/
Home Lat: 43° 33' 29" N, Lon: 79° 39' 03" W
Work Lat: 43° 25' 30" N, Lon: 79° 42' 34" W


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message