From owner-freebsd-stable  Thu Jun 26 16:22:12 1997
Return-Path: <owner-stable>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id QAA18770
          for stable-outgoing; Thu, 26 Jun 1997 16:22:12 -0700 (PDT)
Received: from uk1.imdb.com (UK1.IMDb.COM [192.68.174.59])
          by hub.freebsd.org (8.8.5/8.8.5) with SMTP id QAA18763
          for <stable@freebsd.org>; Thu, 26 Jun 1997 16:22:07 -0700 (PDT)
Received: from robh.imdb.com [194.222.68.23] 
	by uk1.imdb.com with esmtp (Exim 1.62 #1)
	id 0whNm3-0004pQ-00; Fri, 27 Jun 1997 00:16:24 +0100
Date: Thu, 26 Jun 1997 12:15:21 +0100 (BST)
From: Rob Hartill <robh@imdb.com>
X-Sender: robh@localhost
To: stable@freebsd.org
Subject: ipfw, mtu and fragments
Message-ID: <Pine.NEB.3.96.970626120739.12692A-100000@localhost>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-stable@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk


Hi all,

With ipfw running, we've had reports from users having no success accessing
our www servers - they can't connect at all. One user talked to his ISP
and they traced it to a 'MTU' setting problem. A friend thinks this is a
problem with incorrect MTUs resulting in fragmented packets.

Are we on the right track ? Anoyone have experience of this problem ?

Would adding the 2nd 'ipfw' config below help ? ..

     /sbin/ipfw add pass tcp from any to ${ip} 80 setup
     /sbin/ipfw add pass tcp from any to ${ip} 80 frag


thanks in advance,
rob

--
Rob Hartill                              Internet Movie Database (Ltd)
http://www.moviedatabase.com/   .. a site for sore eyes.