From owner-freebsd-questions@FreeBSD.ORG  Sun Nov 22 06:35:27 2009
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 66ECA106566C
	for <freebsd-questions@freebsd.org>;
	Sun, 22 Nov 2009 06:35:27 +0000 (UTC)
	(envelope-from mel.flynn+fbsd.questions@mailing.thruhere.net)
Received: from mailhub.rachie.is-a-geek.net (rachie.is-a-geek.net
	[66.230.99.27]) by mx1.freebsd.org (Postfix) with ESMTP id E5B1A8FC17
	for <freebsd-questions@freebsd.org>;
	Sun, 22 Nov 2009 06:35:26 +0000 (UTC)
Received: from mx1.sbmail.office-on-the.net (mx1.sbmail.office-on-the.net
	[192.168.2.107])
	by mailhub.rachie.is-a-geek.net (Postfix) with ESMTP id B47AD7E853
	for <freebsd-questions@freebsd.org>;
	Sat, 21 Nov 2009 21:35:25 -0900 (AKST)
Received: from dspam.sbmail.office-on-the.net (mx1.sbmail.office-on-the.net
	[192.168.2.107])
	by mx1.sbmail.office-on-the.net (Postfix) with SMTP id 270FFC2CB05
	for <freebsd-questions@freebsd.org>;
	Sat, 21 Nov 2009 21:35:25 -0900 (AKST)
Received: from webmail.testbox.ath.cx (mx1.sbmail.office-on-the.net
	[192.168.2.107])
	by mx1.sbmail.office-on-the.net (Postfix) with ESMTP id 491CBC2CB04;
	Sat, 21 Nov 2009 21:35:24 -0900 (AKST)
MIME-Version: 1.0
Date: Sat, 21 Nov 2009 21:35:24 -0900
From: Mel Flynn <mel.flynn+fbsd.questions@mailing.thruhere.net>
To: Victor Lyapunov <fullblaststorm@gmail.com>
In-Reply-To: <6c51dbb10911210936m67b2127cif8074723049c7046@mail.gmail.com>
References: <6c51dbb10911210659t2e7b87dcg66d71544312d4172@mail.gmail.com>
	<20091121152720.GA3878@current.Sisis.de>
	<20091121170341.2c1bf3cb@gumby.homeunix.com>
	<6c51dbb10911210936m67b2127cif8074723049c7046@mail.gmail.com>
Message-ID: <fed98083777691e5cbd1afee1c77a249@sbmail.office-on-the.net>
X-Sender: mel.flynn+fbsd.questions@mailing.thruhere.net
User-Agent: RoundCube Webmail/0.2
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-DSPAM-Result: Innocent
X-DSPAM-Processed: Sat Nov 21 21:35:24 2009
X-DSPAM-Confidence: 0.9899
X-DSPAM-Improbability: 1 in 9809 chance of being spam
X-DSPAM-Probability: 0.0000
X-DSPAM-Signature: 14,4b08dbac42361901039566
X-DSPAM-Factors: 27, but, 0.01000, but, 0.01000,
	Content-Type*charset="UTF+8", 0.01000,
	Received*webmail.testbox.ath.cx, 0.01000,
	From*<mel.flynn, 0.01000, Received*ESMTP, 0.01000,
	Content-Type*text/plain+charset="UTF, 0.01000,
	Received*Nov+2009, 0.01000, Received*Nov, 0.01000,
	Received*(mx1.sbmail.office, 0.01000,
	From*Mel Flynn <mel.flynn+fbsd.questions@mailing.thruhere.net>, 0.01000,
	Cc*<freebsd+questions, 0.01000,
	X-Sender*fbsd.questions+mailing.thruhere.net, 0.01000,
	Received*(mx1.sbmail.office+on, 0.01000,
	Content-Transfer-Encoding*quoted+printable, 0.01000,
	Cc*questions, 0.01000, Mel, 0.01000,
	From*fbsd.questions+mailing.thruhere.net>, 0.01000,
	User-Agent*Webmail/0.2, 0.01000, Received*with, 0.01000,
	From*fbsd.questions, 0.01000, X-Sender*mel.flynn, 0.01000,
	Received*id, 0.01000, Received*ESMTP+id, 0.01000,
	Received*mx1.sbmail.office, 0.01000,
	X-Sender*fbsd.questions, 0.01000,
	Received*from+webmail.testbox.ath.cx, 0.01000
Cc: RW <rwmaillists@googlemail.com>,
	FreeBSD Mailing List <freebsd-questions@freebsd.org>
Subject: Re: sending mail with attachments always fail (FreeBSD/pf)
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 22 Nov 2009 06:35:27 -0000

On Sat, 21 Nov 2009 23:36:33 +0600, Victor Lyapunov
<fullblaststorm@gmail.com> wrote:
>> This kind of thing is often due to a mtu blackhole - when a larger
>> email causes a full size IP packet to be sent. I don't see why PF
>> should make a difference though, IFAIK it's supposed to let ICMP throu=
gh
>> when it's learned state on a tcp connection.
>=20
> Thanks for your answer.
> Don't know whether it is relevant to the particular issue, but i tried
> both rulesets first with `scrub in all fragment reassemble` and
> another one without it, but neither worked for me. I'm kinda upset by
> the fact that pf can't handle large emails.
>=20
> Any other ideas how to possibly fix it, please?

If on FreeBSD 7 or higher you can get rid of the keep state. It's implici=
t.
Secondly, please test if the problem disappears by removing the rules and
simply allowing outgoing traffic.
Your rules would be:
scrub in on $ext_if fragment reassemble
block in on $ext_if
pass out on $ext_if from $int_if:network to any

If that works, then your problem is likely that you're creating 2 states
for one connection causing confusion.
--=20
Mel