From owner-freebsd-hackers Wed Dec 2 13:04:48 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id NAA04645 for freebsd-hackers-outgoing; Wed, 2 Dec 1998 13:04:48 -0800 (PST) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from ns.mt.sri.com (sri-gw.MT.net [206.127.105.141]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA04636 for ; Wed, 2 Dec 1998 13:04:46 -0800 (PST) (envelope-from nate@mt.sri.com) Received: from mt.sri.com (rocky.mt.sri.com [206.127.76.100]) by ns.mt.sri.com (8.8.8/8.8.8) with SMTP id OAA26427; Wed, 2 Dec 1998 14:04:22 -0700 (MST) (envelope-from nate@rocky.mt.sri.com) Received: by mt.sri.com (SMI-8.6/SMI-SVR4) id OAA07720; Wed, 2 Dec 1998 14:04:20 -0700 Date: Wed, 2 Dec 1998 14:04:20 -0700 Message-Id: <199812022104.OAA07720@mt.sri.com> From: Nate Williams MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit To: Guido van Rooij Cc: Nate Williams , Daniel Eischen , dillon@apollo.backplane.com, hackers@FreeBSD.ORG, luigi@labinfo.iet.unipi.it Subject: Re: TCP bug In-Reply-To: <19981202215730.B23018@gvr.org> References: <199812021626.LAA27156@pcnet1.pcnet.com> <199812021636.JAA06068@mt.sri.com> <19981202215730.B23018@gvr.org> X-Mailer: VM 6.34 under 19.16 "Lille" XEmacs Lucid Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > In my previous mail I already stated why things can go wrong if the > www server on the internet has a badly configured packet filter. > In your case it seems that your router is badly configured. Does it > filter out ICMP ICMP_UNREACH_NEEDFRAG pakcets from the ethernet to > the ouside, but not from your router to the outside? See my followup. I don't filter out ICMP type 3 packets, but instead allow them. (I can't take any credit for this, it was part of the firewall ruleset PHK gave me years ago...) Nate To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message