From owner-freebsd-questions@FreeBSD.ORG  Mon Jun 20 20:58:22 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@FreeBSD.ORG
Delivered-To: freebsd-questions@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 487BF16A41C
	for <freebsd-questions@FreeBSD.ORG>;
	Mon, 20 Jun 2005 20:58:22 +0000 (GMT)
	(envelope-from mime@traveller.cz)
Received: from ss.eunet.cz (ss.eunet.cz [193.85.228.13])
	by mx1.FreeBSD.org (Postfix) with ESMTP id BFE0243D1F
	for <freebsd-questions@FreeBSD.ORG>;
	Mon, 20 Jun 2005 20:58:21 +0000 (GMT)
	(envelope-from mime@traveller.cz)
Received: from localhost.i.cz (ss.eunet.cz [193.85.228.13])
	by ss.eunet.cz (8.13.1/8.13.1) with ESMTP id j5KKwI3F099873;
	Mon, 20 Jun 2005 22:58:19 +0200 (CEST)
	(envelope-from mime@traveller.cz)
From: Michal Mertl <mime@traveller.cz>
To: Gary Kline <kline@tao.thought.org>
In-Reply-To: <20050620163227.GA68751@thought.org>
References: <20050620163227.GA68751@thought.org>
Content-Type: text/plain
Date: Mon, 20 Jun 2005 22:58:17 +0200
Message-Id: <1119301097.1210.3.camel@genius1.i.cz>
Mime-Version: 1.0
X-Mailer: Evolution 2.2.3 FreeBSD GNOME Team Port 
Content-Transfer-Encoding: 7bit
Cc: FreeBSD Mailing List <freebsd-questions@FreeBSD.ORG>
Subject: Re: any ipf wizards out there?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Jun 2005 20:58:22 -0000

Gary Kline wrote:
> 	Folks,
> 
> 	A couple weeks ago I realized that my ipf ruleset was messing
> 	up my web access ... ad had been for months  I just tried an
> 	older, simpler ipf.rules.  Same results.  Can anybody out there
> 	in FreeBSD-land clue me in please? 

Without any concrete information it's hard to guess. The only thing I
can think of is that you don't allow outgoing ICMP packet-too-big. This
will make it for users with small MTU (e.g. some dial-up, PPPoE (ADSL)
impossible to receive bigger pages (longer then their MTU minus
something).


> 	gary
> 
>