Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 12 Jun 2000 17:34:54 -0700
From:      "Timothy L. Robertson" <tlrobertson@mindspring.com>
To:        <freebsd-questions@freebsd.org>
Subject:   FOLLOWUP: Some Network Traffic Not Getting Through Firewall
Message-ID:  <000201bfd4cf$32e8ce60$0301a8c0@timothyr.net>
In-Reply-To: <20000608084332.J81376@draenor.org>

next in thread | previous in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.

------=_NextPart_000_0003_01BFD494.868B7D00
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hi,

I am using 4.0-RELEASE to act as a router between my DSL connection and my 3
windows PCs.  I connect with PPPoE and use ipfw and nat for bridging and
address translation.  As I described in my earlier post, most things work,
but some particular web sites don't load.  Thanks to Marc Silver and
Corigan, who suggested I try changing the options for ipfw or the MTU on the
windows box, but I still can't get it to work.  I've reduced the MTU to 1400
and convinced myself that the firewall is wide open.  After staring at
tcpdumps for the past few days I don't think it is a datagram size problem;
look at the attached files and judge for yourself.  One thing I notice is
that tcp options like <wscale 0, nop (does that mean no op?), and timestamp>
don't seem to show up in the slashdot.fail file, while they do in the
slashdot.success file.   Any advice appreciated.

Thanks,
-Tim
timothyr@timothyr.net

------=_NextPart_000_0003_01BFD494.868B7D00
Content-Type: application/octet-stream;
	name="netstat-i"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
	filename="netstat-i"

Name  Mtu   Network       Address            Ipkts Ierrs    Opkts Oerrs  =
Coll=0A=
xl0   1500  <Link#1>    00:01:02:48:ad:91      158     0      147     0  =
   0=0A=
xl0   1500  10/24         scarlet              158     0      147     0  =
   0=0A=
lp0*  1500  <Link#2>                             0     0        0     0  =
   0=0A=
ep0   1492  <Link#3>    00:c0:4f:da:06:83     2254     0     1693     0  =
   0=0A=
ep0   1492  192.168.1     192.168.1.1         2254     0     1693     0  =
   0=0A=
sl0*  552   <Link#4>                             0     0        0     0  =
   0=0A=
ppp0* 1500  <Link#5>                             0     0        0     0  =
   0=0A=
lo0   16384 <Link#6>                             0     0        0     0  =
   0=0A=
lo0   16384 127           localhost              0     0        0     0  =
   0=0A=
gif0* 1280  <Link#7>                             0     0        0     0  =
   0=0A=
gif1* 1280  <Link#8>                             0     0        0     0  =
   0=0A=
gif2* 1280  <Link#9>                             0     0        0     0  =
   0=0A=
gif3* 1280  <Link#10>                            0     0        0     0  =
   0=0A=
stf0* 1280  <Link#11>                            0     0        0     0  =
   0=0A=
faith 1500  <Link#12>                            0     0        0     0  =
   0=0A=
tun0  1492  <Link#13>                          122     0      110     0  =
   0=0A=
tun0  1492  165.121       user-2inirrm.ds      122     0      110     0  =
   0=0A=

------=_NextPart_000_0003_01BFD494.868B7D00
Content-Type: application/octet-stream;
	name="netstat-rn"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
	filename="netstat-rn"

Routing tables=0A=
=0A=
Internet:=0A=
Destination        Gateway            Flags      Netif Expire=0A=
default            165.121.111.1      UGSc       tun0=0A=
10/24              link#1             UC          xl0 =3D>=0A=
127.0.0.1          127.0.0.1          UH          lo0=0A=
165.121.111.1      165.121.111.118    UH         tun0=0A=
192.168.1          link#3             UC          ep0 =3D>=0A=
192.168.1.2        0:a0:c9:ee:e0:c9   UHLW        ep0   1144=0A=
192.168.1.3        0:0:86:50:46:7f    UHLW        ep0    478=0A=
192.168.1.4        0:0:86:15:ab:f6    UHLW        ep0    392=0A=

------=_NextPart_000_0003_01BFD494.868B7D00
Content-Type: application/octet-stream;
	name="rc.conf"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
	filename="rc.conf"

# This file now contains just the overrides from /etc/defaults/rc.conf=0A=
# please make all changes to this file.=0A=
=0A=
network_interfaces=3D"auto"=0A=
ifconfig_xl0=3D"inet 10.0.0.2  netmask 255.255.255.0"=0A=
ifconfig_ep0=3D"inet 192.168.1.1  netmask 255.255.255.0 mtu 1492"=0A=
hostname=3D"scarlet"=0A=
ppp_enable=3D"YES"=0A=
ppp_mode=3D"ddial"=0A=
ppp_profile=3D"pppoe"=0A=
gateway_enable=3D"YES"=0A=
#firewall_enable=3D"YES"=0A=
#natd_enable=3D"YES"=0A=
#natd_interface=3D"tun0"=0A=
#natd_flags=3D"-dynamic -log"=0A=
tcp_extensions=3D"YES"=0A=
linux_enable=3D"YES"=0A=
check_quotas=3D"NO"=0A=
moused_type=3D"auto"=0A=
moused_enable=3D"YES"=0A=
named_enable=3D"NO"
------=_NextPart_000_0003_01BFD494.868B7D00
Content-Type: application/octet-stream;
	name="rc.firewall"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
	filename="rc.firewall"

/sbin/ipfw -f flush=0A=
#/sbin/ipfw add allow all from 127.0.0.1 to 127.0.0.1=0A=
/sbin/ipfw add 100 divert natd all from any to any via tun0=0A=
/sbin/ipfw add 200 allow all from any to any=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=

------=_NextPart_000_0003_01BFD494.868B7D00
Content-Type: application/octet-stream;
	name="slashdot.fail"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
	filename="slashdot.fail"

***tcpdump -vvv -l -s 1600 -X=0A=
***try to load slashdot.org from netscape on WinNT machine behind =
firewall=0A=
=0A=
17:45:58.151297 PPPoE  [ses 0x351] user-2inirrm.dsl.mindspring.com.4533 =
> slashdot.org.http: S 4208497:4208497(0) win 8192 <mss 1460> (ttl 127, =
id 24418)=0A=
0x0000	 1100 0351 002e 0021 4500 002c 5f62 0000	...Q...!E..,_b..=0A=
0x0010	 7f06 442e a579 6f76 401c 4330 11b5 0050	..D..yov@.C0...P=0A=
0x0020	 0040 3771 0000 0000 6002 2000 9634 0000	.@7q....`....4..=0A=
0x0030	 0204 05b4                              	....=0A=
17:45:58.286474 PPPoE  [ses 0x351] slashdot.org.http > =
user-2inirrm.dsl.mindspring.com.4533: S 1873767617:1873767617(0) ack =
4208498 win 16060 <mss 1460> (DF) (ttl 51, id 29662)=0A=
0x0000	 1100 0351 002e 0021 4500 002c 73de 4000	...Q...!E..,s.@.=0A=
0x0010	 3306 3bb2 401c 4330 a579 6f76 0050 11b5	3.;.@.C0.yov.P..=0A=
0x0020	 6faf 6cc1 0040 3772 6012 3ebc 9af6 0000	o.l..@7r`.>.....=0A=
0x0030	 0204 05b4                              	....=0A=
17:45:58.288499 PPPoE  [ses 0x351] user-2inirrm.dsl.mindspring.com.4533 =
> slashdot.org.http: . 1:1(0) ack 1 win 8760 (ttl 127, id 24674)=0A=
0x0000	 1100 0351 002a 0021 4500 0028 6062 0000	...Q.*.!E..(`b..=0A=
0x0010	 7f06 4332 a579 6f76 401c 4330 11b5 0050	..C2.yov@.C0...P=0A=
0x0020	 0040 3772 6faf 6cc2 5010 2238 cf37 0000	.@7ro.l.P."8.7..=0A=
17:45:58.289786 PPPoE  [ses 0x351] user-2inirrm.dsl.mindspring.com.4533 =
> slashdot.org.http: P 1:346(345) ack 1 win 8760 (ttl 127, id 24930)=0A=
0x0000	 1100 0351 0183 0021 4500 0181 6162 0000	...Q...!E...ab..=0A=
0x0010	 7f06 40d9 a579 6f76 401c 4330 11b5 0050	..@..yov@.C0...P=0A=
0x0020	 0040 3772 6faf 6cc2 5018 2238 d6c1 0000	.@7ro.l.P."8....=0A=
0x0030	 4745 5420 2f20 4854 5450 2f31 2e30 0d0a	GET./.HTTP/1.0..=0A=
0x0040	 436f 6e6e 6563 7469 6f6e 3a20 4b65 6570	Connection:.Keep=0A=
0x0050	 2d41 6c69 7665 0d0a 5573 6572 2d41 6765	-Alive..User-Age=0A=
0x0060	 6e74 3a20 4d6f 7a69 6c6c 612f 342e 3720	nt:.Mozilla/4.7.=0A=
0x0070	 5b65 6e5d 2028 5769 6e4e 543b 2049 290d	[en].(WinNT;.I).=0A=
0x0080	 0a48 6f73 743a 2073 6c61 7368 646f 742e	.Host:.slashdot.=0A=
0x0090	 6f72 670d 0a41 6363 6570 743a 2069 6d61	org..Accept:.ima=0A=
0x00a0	 6765 2f67 6966 2c20 696d 6167 652f 782d	ge/gif,.image/x-=0A=
0x00b0	 7862 6974 6d61 702c 2069 6d61 6765 2f6a	xbitmap,.image/j=0A=
0x00c0	 7065 672c 2069 6d61 6765 2f70 6a70 6567	peg,.image/pjpeg=0A=
0x00d0	 2c20 696d 6167 652f 706e 672c 202a 2f2a	,.image/png,.*/*=0A=
0x00e0	 0d0a 4163 6365 7074 2d45 6e63 6f64 696e	..Accept-Encodin=0A=
0x00f0	 673a 2067 7a69 700d 0a41 6363 6570 742d	g:.gzip..Accept-=0A=
0x0100	 4c61 6e67 7561 6765 3a20 656e 0d0a 4163	Language:.en..Ac=0A=
0x0110	 6365 7074 2d43 6861 7273 6574 3a20 6973	cept-Charset:.is=0A=
0x0120	 6f2d 3838 3539 2d31 2c2a 2c75 7466 2d38	o-8859-1,*,utf-8=0A=
0x0130	 0d0a 436f 6f6b 6965 3a20 7573 6572 3d25	..Cookie:.user=3D%=0A=
0x0140	 3235 3331 2532 3533 3325 3235 3334 2532	2531%2533%2534%2=0A=
0x0150	 3533 3425 3235 3337 2532 3533 3225 3235	534%2537%2532%25=0A=
0x0160	 3361 2532 3533 6125 3235 3636 2532 3537	3a%253a%2566%257=0A=
0x0170	 3525 3235 3665 2532 3536 3625 3235 3735	5%256e%2566%2575=0A=
0x0180	 2532 3536 650d 0a0d 0a                 	%256e....=0A=
17:45:58.437541 PPPoE  [ses 0x351] slashdot.org.http > =
user-2inirrm.dsl.mindspring.com.4533: . 1:1(0) ack 346 win 15715 (DF) =
(ttl 51, id 29674)=0A=
0x0000	 1100 0351 002a 0021 4500 0028 73ea 4000	...Q.*.!E..(s.@.=0A=
0x0010	 3306 3baa 401c 4330 a579 6f76 0050 11b5	3.;.@.C0.yov.P..=0A=
0x0020	 6faf 6cc2 0040 38cb 5010 3d63 b2b3 0000	o.l..@8.P.=3Dc....=0A=
17:45:58.814898 PPPoE  [ses 0x351] user-2inirrm.dsl.mindspring.com.1037 =
> ns1.mindspring.com.domain:  58783+ PTR? 48.67.28.64.in-addr.arpa. (42) =
(ttl 64, id 326)=0A=
0x0000	 1100 0351 0048 0021 4500 0046 0146 0000	...Q.H.!E..F.F..=0A=
0x0010	 4011 d872 a579 6f76 cf45 bcb9 040d 0035	@..r.yov.E.....5=0A=
0x0020	 0032 7f96 e59f 0100 0001 0000 0000 0000	.2..............=0A=
0x0030	 0234 3802 3637 0232 3802 3634 0769 6e2d	.48.67.28.64.in-=0A=
0x0040	 6164 6472 0461 7270 6100 000c 0001     	addr.arpa.....=0A=
17:45:58.953172 PPPoE  [ses 0x351] ns1.mindspring.com.domain > =
user-2inirrm.dsl.mindspring.com.1037:  58783 q: =
48.67.28.64.in-addr.arpa. 2/3/3 48.67.28.64.in-addr.arpa. CNAME =
48.0/24.67.28.64.in-addr.arpa., 48.0/24.67.28.64.in-addr.arpa. PTR =
slashdot.org. (224) (ttl 21, id 7831)=0A=
0x0000	 1100 0351 00fe 0021 4500 00fc 1e97 0000	...Q...!E.......=0A=
0x0010	 1511 e56b cf45 bcb9 a579 6f76 0035 040d	...k.E...yov.5..=0A=
0x0020	 00e8 407b e59f 8180 0001 0002 0003 0003	..@{............=0A=
0x0030	 0234 3802 3637 0232 3802 3634 0769 6e2d	.48.67.28.64.in-=0A=
0x0040	 6164 6472 0461 7270 6100 000c 0001 c00c	addr.arpa.......=0A=
0x0050	 0005 0001 0001 168a 001f 0234 3804 302f	...........48.0/=0A=
0x0060	 3234 0236 3702 3238 0236 3407 696e 2d61	24.67.28.64.in-a=0A=
0x0070	 6464 7204 6172 7061 00c0 3600 0c00 0100	ddr.arpa..6.....=0A=
0x0080	 0116 8a00 0e08 736c 6173 6864 6f74 036f	......slashdot.o=0A=
0x0090	 7267 00c0 3900 0200 0100 0116 8a00 1103	rg..9...........=0A=
0x00a0	 6e73 3107 616e 646f 7665 7203 6e65 7400	ns1.andover.net.=0A=
0x00b0	 c039 0002 0001 0001 168a 0006 036e 7332	.9...........ns2=0A=
0x00c0	 c07f c039 0002 0001 0001 168a 0006 036e	...9...........n=0A=
0x00d0	 7333 c07f c07b 0001 0001 0005 b8cb 0004	s3...{..........=0A=
0x00e0	 d1cf e0c4 c098 0001 0001 0005 7f6b 0004	.............k..=0A=
0x00f0	 d1cf e0c5 c0aa 0001 0001 0004 ba5d 0004	.............]..=0A=
0x0100	 d1c0 d968                              	...h=0A=
17:45:58.957407 PPPoE  [ses 0x351] user-2inirrm.dsl.mindspring.com.1038 =
> ns1.mindspring.com.domain:  58784+ PTR? 118.111.121.165.in-addr.arpa. =
(46) (ttl 64, id 327)=0A=
0x0000	 1100 0351 004c 0021 4500 004a 0147 0000	...Q.L.!E..J.G..=0A=
0x0010	 4011 d86d a579 6f76 cf45 bcb9 040e 0035	@..m.yov.E.....5=0A=
0x0020	 0036 88ce e5a0 0100 0001 0000 0000 0000	.6..............=0A=
0x0030	 0331 3138 0331 3131 0331 3231 0331 3635	.118.111.121.165=0A=
0x0040	 0769 6e2d 6164 6472 0461 7270 6100 000c	.in-addr.arpa...=0A=
0x0050	 0001                                   	..=0A=
17:45:59.091178 PPPoE  [ses 0x351] ns1.mindspring.com.domain > =
user-2inirrm.dsl.mindspring.com.1038:  58784 q: =
118.111.121.165.in-addr.arpa. 1/2/2 118.111.121.165.in-addr.arpa. PTR =
user-2inirrm.dsl.mindspring.com. (204) (ttl 21, id 7845)=0A=
0x0000	 1100 0351 00ea 0021 4500 00e8 1ea5 0000	...Q...!E.......=0A=
0x0010	 1511 e571 cf45 bcb9 a579 6f76 0035 040e	...q.E...yov.5..=0A=
0x0020	 00d4 1565 e5a0 8180 0001 0001 0002 0002	...e............=0A=
0x0030	 0331 3138 0331 3131 0331 3231 0331 3635	.118.111.121.165=0A=
0x0040	 0769 6e2d 6164 6472 0461 7270 6100 000c	.in-addr.arpa...=0A=
0x0050	 0001 c00c 000c 0001 0001 50d7 0021 0c75	..........P..!.u=0A=
0x0060	 7365 722d 3269 6e69 7272 6d03 6473 6c0a	ser-2inirrm.dsl.=0A=
0x0070	 6d69 6e64 7370 7269 6e67 0363 6f6d 0003	mindspring.com..=0A=
0x0080	 3131 3103 3132 3103 3136 3507 696e 2d61	111.121.165.in-a=0A=
0x0090	 6464 7204 6172 7061 0000 0200 0100 0108	ddr.arpa........=0A=
0x00a0	 8900 1605 6974 6368 790a 6d69 6e64 7370	....itchy.mindsp=0A=
0x00b0	 7269 6e67 036e 6574 00c0 5b00 0200 0100	ring.net..[.....=0A=
0x00c0	 0108 8900 0b08 7363 7261 7463 6879 c085	......scratchy..=0A=
0x00d0	 c07f 0001 0001 0001 da19 0004 cf45 c8d2	.............E..=0A=
0x00e0	 c0a1 0001 0001 0000 0cd7 0004 cf45 c8d3	.............E..=0A=
17:46:00.101556 PPPoE  [ses 0x351] user-2inirrm.dsl.mindspring.com.1039 =
> ns1.mindspring.com.domain:  58785+ PTR? 185.188.69.207.in-addr.arpa. =
(45) (ttl 64, id 328)=0A=
0x0000	 1100 0351 004b 0021 4500 0049 0148 0000	...Q.K.!E..I.H..=0A=
0x0010	 4011 d86d a579 6f76 cf45 bcb9 040f 0035	@..m.yov.E.....5=0A=
0x0020	 0035 0c62 e5a1 0100 0001 0000 0000 0000	.5.b............=0A=
0x0030	 0331 3835 0331 3838 0236 3903 3230 3707	.185.188.69.207.=0A=
0x0040	 696e 2d61 6464 7204 6172 7061 0000 0c00	in-addr.arpa....=0A=
0x0050	 01                                     	.=0A=
17:46:00.235660 PPPoE  [ses 0x351] ns1.mindspring.com.domain > =
user-2inirrm.dsl.mindspring.com.1039:  58785 q: =
185.188.69.207.in-addr.arpa. 1/3/3 185.188.69.207.in-addr.arpa. PTR =
ns1.mindspring.com. (227) (ttl 21, id 7971)=0A=
0x0000	 1100 0351 0101 0021 4500 00ff 1f23 0000	...Q...!E....#..=0A=
0x0010	 1511 e4dc cf45 bcb9 a579 6f76 0035 040f	.....E...yov.5..=0A=
0x0020	 00eb 3403 e5a1 8180 0001 0001 0003 0003	..4.............=0A=
0x0030	 0331 3835 0331 3838 0236 3903 3230 3707	.185.188.69.207.=0A=
0x0040	 696e 2d61 6464 7204 6172 7061 0000 0c00	in-addr.arpa....=0A=
0x0050	 01c0 0c00 0c00 0100 0008 c400 1403 6e73	..............ns=0A=
0x0060	 310a 6d69 6e64 7370 7269 6e67 0363 6f6d	1.mindspring.com=0A=
0x0070	 0003 3138 3802 3639 0332 3037 0769 6e2d	..188.69.207.in-=0A=
0x0080	 6164 6472 0461 7270 6100 0002 0001 0000	addr.arpa.......=0A=
0x0090	 08c4 0019 0973 7065 616b 6561 7379 0965	.....speakeasy.e=0A=
0x00a0	 6172 7468 6c69 6e6b 036e 6574 00c0 4d00	arthlink.net..M.=0A=
0x00b0	 0200 0100 0008 c400 0a07 6865 6172 7361	..........hearsa=0A=
0x00c0	 79c0 7ac0 4d00 0200 0100 0008 c400 0805	y.z.M...........=0A=
0x00d0	 7275 6d6f 72c0 7ac0 7000 0100 0100 0004	rumor.z.p.......=0A=
0x00e0	 ea00 04cf 45bc c8c0 9500 0100 0100 0002	....E...........=0A=
0x00f0	 2300 04cf 45bc c9c0 ab00 0100 0100 0002	#...E...........=0A=
0x0100	 2300 04cf 45bc ca                      	#...E..=0A=
17:46:15.251061 PPPoE  [ses 0x351] LCP EchoReq id=3D0x8 =
magic=3D0x46b42cb1=0A=
0x0000	 1100 0351 0012 c021 0908 0010 46b4 2cb1	...Q...!....F.,.=0A=
0x0010	 594e 4f54 0000 0008                    	YNOT....=0A=
17:46:15.297896 PPPoE  [ses 0x351] LCP EchoRep id=3D0x8 magic=3D0x2255896=0A=
0x0000	 1100 0351 0012 c021 0a08 0010 0225 5896	...Q...!.....%X.=0A=
0x0010	 594e 4f54 0000 0008 0000 0000 0000 0000	YNOT............=0A=
0x0020	 0000 0000 0000 0000 0000 0000 0000     	..............=0A=
17:46:45.851502 PPPoE  [ses 0x351] LCP EchoReq id=3D0x9 =
magic=3D0x46b42cb1=0A=
0x0000	 1100 0351 0012 c021 0909 0010 46b4 2cb1	...Q...!....F.,.=0A=
0x0010	 594e 4f54 0000 0009                    	YNOT....=0A=
17:46:45.899100 PPPoE  [ses 0x351] LCP EchoRep id=3D0x9 magic=3D0x2255896=0A=
0x0000	 1100 0351 0012 c021 0a09 0010 0225 5896	...Q...!.....%X.=0A=
0x0010	 594e 4f54 0000 0009 0000 0000 0000 0000	YNOT............=0A=
0x0020	 0000 0000 0000 0000 0000 0000 0000     	..............=0A=
=0A=
****Push "Stop" button on netscape=0A=
=0A=
17:47:06.518383 PPPoE  [ses 0x351] user-2inirrm.dsl.mindspring.com.4533 =
> slashdot.org.http: F 346:346(0) ack 1 win 8760 (ttl 127, id 8035)=0A=
0x0000	 1100 0351 002a 0021 4500 0028 1f63 0000	...Q.*.!E..(.c..=0A=
0x0010	 7f06 8431 a579 6f76 401c 4330 11b5 0050	...1.yov@.C0...P=0A=
0x0020	 0040 38cb 6faf 6cc2 5011 2238 cddd 0000	.@8.o.l.P."8....=0A=
17:47:06.653156 PPPoE  [ses 0x351] slashdot.org.http > =
user-2inirrm.dsl.mindspring.com.4533: . 2921:2921(0) ack 347 win 16060 =
(DF) (ttl 51, id 36381)=0A=
0x0000	 1100 0351 002a 0021 4500 0028 8e1d 4000	...Q.*.!E..(..@.=0A=
0x0010	 3306 2177 401c 4330 a579 6f76 0050 11b5	3.!w@.C0.yov.P..=0A=
0x0020	 6faf 782a 0040 38cc 5010 3ebc a5f1 0000	o.x*.@8.P.>.....=0A=
17:47:16.452057 PPPoE  [ses 0x351] LCP EchoReq id=3D0xa =
magic=3D0x46b42cb1=0A=
0x0000	 1100 0351 0012 c021 090a 0010 46b4 2cb1	...Q...!....F.,.=0A=
0x0010	 594e 4f54 0000 000a                    	YNOT....=0A=
17:47:16.500286 PPPoE  [ses 0x351] LCP EchoRep id=3D0xa magic=3D0x2255896=0A=
0x0000	 1100 0351 0012 c021 0a0a 0010 0225 5896	...Q...!.....%X.=0A=
0x0010	 594e 4f54 0000 000a 0000 0000 0000 0000	YNOT............=0A=
0x0020	 0000 0000 0000 0000 0000 0000 0000     	..............=0A=

------=_NextPart_000_0003_01BFD494.868B7D00
Content-Type: application/octet-stream;
	name="slashdot.success"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
	filename="slashdot.success"

***tcpdump -vvv -l -s 1600 -X=0A=
***lynx slashdot.org from firewall machine works=0A=
=0A=
17:48:07.244302 PPPoE  [ses 0x351] user-2inirrm.dsl.mindspring.com.1040 =
> ns1.mindspring.com.domain:  11355+ A? slashdot.org. (30) (ttl 64, id =
506)=0A=
0x0000	 1100 0351 003c 0021 4500 003a 01fa 0000	...Q.<.!E..:....=0A=
0x0010	 4011 d7ca a579 6f76 cf45 bcb9 0410 0035	@....yov.E.....5=0A=
0x0020	 0026 95ed 2c5b 0100 0001 0000 0000 0000	.&..,[..........=0A=
0x0030	 0873 6c61 7368 646f 7403 6f72 6700 0001	.slashdot.org...=0A=
0x0040	 0001                                   	..=0A=
17:48:07.377977 PPPoE  [ses 0x351] ns1.mindspring.com.domain > =
user-2inirrm.dsl.mindspring.com.1040:  11355 q: slashdot.org. 1/3/3 =
slashdot.org. A slashdot.org (159) (ttl 21, id 19472)=0A=
0x0000	 1100 0351 00bd 0021 4500 00bb 4c10 0000	...Q...!E...L...=0A=
0x0010	 1511 b833 cf45 bcb9 a579 6f76 0035 0410	...3.E...yov.5..=0A=
0x0020	 00a7 a6b3 2c5b 8180 0001 0001 0003 0003	....,[..........=0A=
0x0030	 0873 6c61 7368 646f 7403 6f72 6700 0001	.slashdot.org...=0A=
0x0040	 0001 c00c 0001 0001 0000 04e3 0004 401c	..............@.=0A=
0x0050	 4330 c00c 0002 0001 0000 04e3 0011 036e	C0.............n=0A=
0x0060	 7331 0761 6e64 6f76 6572 036e 6574 00c0	s1.andover.net..=0A=
0x0070	 0c00 0200 0100 0004 e300 0603 6e73 32c0	............ns2.=0A=
0x0080	 3ec0 0c00 0200 0100 0004 e300 0603 6e73	>.............ns=0A=
0x0090	 33c0 3ec0 3a00 0100 0100 05b8 4b00 04d1	3.>.:.......K...=0A=
0x00a0	 cfe0 c4c0 5700 0100 0100 057e eb00 04d1	....W......~....=0A=
0x00b0	 cfe0 c5c0 6900 0100 0100 04b9 dd00 04d1	....i...........=0A=
0x00c0	 c0d9 68                                	..h=0A=
17:48:07.442750 PPPoE  [ses 0x351] user-2inirrm.dsl.mindspring.com.1041 =
> ns1.mindspring.com.domain:  13421+ A? slashdot.org. (30) (ttl 64, id =
508)=0A=
0x0000	 1100 0351 003c 0021 4500 003a 01fc 0000	...Q.<.!E..:....=0A=
0x0010	 4011 d7c8 a579 6f76 cf45 bcb9 0411 0035	@....yov.E.....5=0A=
0x0020	 0026 8dda 346d 0100 0001 0000 0000 0000	.&..4m..........=0A=
0x0030	 0873 6c61 7368 646f 7403 6f72 6700 0001	.slashdot.org...=0A=
0x0040	 0001                                   	..=0A=
17:48:07.576616 PPPoE  [ses 0x351] ns1.mindspring.com.domain > =
user-2inirrm.dsl.mindspring.com.1041:  13421 q: slashdot.org. 1/3/3 =
slashdot.org. A slashdot.org (159) (ttl 21, id 19498)=0A=
0x0000	 1100 0351 00bd 0021 4500 00bb 4c2a 0000	...Q...!E...L*..=0A=
0x0010	 1511 b819 cf45 bcb9 a579 6f76 0035 0411	.....E...yov.5..=0A=
0x0020	 00a7 9ea0 346d 8180 0001 0001 0003 0003	....4m..........=0A=
0x0030	 0873 6c61 7368 646f 7403 6f72 6700 0001	.slashdot.org...=0A=
0x0040	 0001 c00c 0001 0001 0000 04e3 0004 401c	..............@.=0A=
0x0050	 4330 c00c 0002 0001 0000 04e3 0011 036e	C0.............n=0A=
0x0060	 7331 0761 6e64 6f76 6572 036e 6574 00c0	s1.andover.net..=0A=
0x0070	 0c00 0200 0100 0004 e300 0603 6e73 32c0	............ns2.=0A=
0x0080	 3ec0 0c00 0200 0100 0004 e300 0603 6e73	>.............ns=0A=
0x0090	 33c0 3ec0 3a00 0100 0100 05b8 4b00 04d1	3.>.:.......K...=0A=
0x00a0	 cfe0 c4c0 5700 0100 0100 057e eb00 04d1	....W......~....=0A=
0x00b0	 cfe0 c5c0 6900 0100 0100 04b9 dd00 04d1	....i...........=0A=
0x00c0	 c0d9 68                                	..h=0A=
17:48:07.591224 PPPoE  [ses 0x351] user-2inirrm.dsl.mindspring.com.1024 =
> slashdot.org.http: S 69142727:69142727(0) win 16384 <mss =
1452,nop,wscale 0,nop,nop,timestamp 36166 0> (DF) (ttl 64, id 510)=0A=
0x0000	 1100 0351 003e 0021 4500 003c 01fe 4000	...Q.>.!E..<..@.=0A=
0x0010	 4006 a082 a579 6f76 401c 4330 0400 0050	@....yov@.C0...P=0A=
0x0020	 041f 08c7 0000 0000 a002 4000 d457 0000	..........@..W..=0A=
0x0030	 0204 05ac 0103 0300 0101 080a 0000 8d46	...............F=0A=
0x0040	 0000 0000                              	....=0A=
17:48:07.728643 PPPoE  [ses 0x351] slashdot.org.http > =
user-2inirrm.dsl.mindspring.com.1024: S 2033146460:2033146460(0) ack =
69142728 win 15972 <mss 1452,nop,nop,timestamp 260672497 =
36166,nop,wscale 0> (DF) (ttl 51, id 6415)=0A=
0x0000	 1100 0351 003e 0021 4500 003c 190f 4000	...Q.>.!E..<..@.=0A=
0x0010	 3306 9671 401c 4330 a579 6f76 0050 0400	3..q@.C0.yov.P..=0A=
0x0020	 792f 5a5c 041f 08c8 a012 3e64 66dc 0000	y/Z\......>df...=0A=
0x0030	 0204 05ac 0101 080a 0f89 8bf1 0000 8d46	...............F=0A=
0x0040	 0103 0300                              	....=0A=
17:48:07.732572 PPPoE  [ses 0x351] user-2inirrm.dsl.mindspring.com.1024 =
> slashdot.org.http: . 1:1(0) ack 1 win 17280 <nop,nop,timestamp 36180 =
260672497> (DF) (ttl 64, id 511)=0A=
0x0000	 1100 0351 0036 0021 4500 0034 01ff 4000	...Q.6.!E..4..@.=0A=
0x0010	 4006 a089 a579 6f76 401c 4330 0400 0050	@....yov@.C0...P=0A=
0x0020	 041f 08c8 792f 5a5d 8010 4380 8d6e 0000	....y/Z]..C..n..=0A=
0x0030	 0101 080a 0000 8d54 0f89 8bf1          	.......T....=0A=
17:48:07.735674 PPPoE  [ses 0x351] user-2inirrm.dsl.mindspring.com.1024 =
> slashdot.org.http: P 1:191(190) ack 1 win 17280 <nop,nop,timestamp =
36181 260672497> (DF) (ttl 64, id 512)=0A=
0x0000	 1100 0351 00f4 0021 4500 00f2 0200 4000	...Q...!E.....@.=0A=
0x0010	 4006 9fca a579 6f76 401c 4330 0400 0050	@....yov@.C0...P=0A=
0x0020	 041f 08c8 792f 5a5d 8018 4380 bd35 0000	....y/Z]..C..5..=0A=
0x0030	 0101 080a 0000 8d55 0f89 8bf1 4745 5420	.......U....GET.=0A=
0x0040	 2f20 4854 5450 2f31 2e30 0d0a 486f 7374	/.HTTP/1.0..Host=0A=
0x0050	 3a20 736c 6173 6864 6f74 2e6f 7267 0d0a	:.slashdot.org..=0A=
0x0060	 4163 6365 7074 3a20 7465 7874 2f68 746d	Accept:.text/htm=0A=
0x0070	 6c2c 2074 6578 742f 706c 6169 6e2c 2074	l,.text/plain,.t=0A=
0x0080	 6578 742f 7367 6d6c 2c20 2a2f 2a3b 713d	ext/sgml,.*/*;q=3D=0A=
0x0090	 302e 3031 0d0a 4163 6365 7074 2d45 6e63	0.01..Accept-Enc=0A=
0x00a0	 6f64 696e 673a 2067 7a69 702c 2063 6f6d	oding:.gzip,.com=0A=
0x00b0	 7072 6573 730d 0a41 6363 6570 742d 4c61	press..Accept-La=0A=
0x00c0	 6e67 7561 6765 3a20 656e 0d0a 5573 6572	nguage:.en..User=0A=
0x00d0	 2d41 6765 6e74 3a20 4c79 6e78 2f32 2e38	-Agent:.Lynx/2.8=0A=
0x00e0	 2e32 7265 6c2e 3120 6c69 6277 7777 2d46	.2rel.1.libwww-F=0A=
0x00f0	 4d2f 322e 3134 0d0a 0d0a               	M/2.14....=0A=
17:48:07.875629 PPPoE  [ses 0x351] slashdot.org.http > =
user-2inirrm.dsl.mindspring.com.1024: . 1:1(0) ack 191 win 15782 =
<nop,nop,timestamp 260672512 36181> (DF) (ttl 51, id 6424)=0A=
0x0000	 1100 0351 0036 0021 4500 0034 1918 4000	...Q.6.!E..4..@.=0A=
0x0010	 3306 9670 401c 4330 a579 6f76 0050 0400	3..p@.C0.yov.P..=0A=
0x0020	 792f 5a5d 041f 0986 8010 3da6 927a 0000	y/Z]......=3D..z..=0A=
0x0030	 0101 080a 0f89 8c00 0000 8d55          	...........U=0A=
17:48:07.897749 PPPoE  [ses 0x351] slashdot.org.http > =
user-2inirrm.dsl.mindspring.com.1024: P 1:1441(1440) ack 191 win 15972 =
<nop,nop,timestamp 260672513 36181> (DF) (ttl 51, id 6433)=0A=
0x0000	 1100 0351 05d6 0021 4500 05d4 1921 4000	...Q...!E....!@.=0A=
0x0010	 3306 90c7 401c 4330 a579 6f76 0050 0400	3...@.C0.yov.P..=0A=
0x0020	 792f 5a5d 041f 0986 8018 3e64 fc57 0000	y/Z]......>d.W..=0A=
0x0030	 0101 080a 0f89 8c01 0000 8d55 4854 5450	...........UHTTP=0A=
0x0040	 2f31 2e31 2032 3030 204f 4b0d 0a44 6174	/1.1.200.OK..Dat=0A=
0x0050	 653a 2054 7565 2c20 3133 204a 756e 2032	e:.Tue,.13.Jun.2=0A=
0x0060	 3030 3020 3030 3a30 303a 3031 2047 4d54	000.00:00:01.GMT=0A=
0x0070	 0d0a 5365 7276 6572 3a20 4170 6163 6865	..Server:.Apache=0A=
0x0080	 2f31 2e33 2e31 3220 2855 6e69 7829 206d	/1.3.12.(Unix).m=0A=
0x0090	 6f64 5f70 6572 6c2f 312e 3232 0d0a 436f	od_perl/1.22..Co=0A=
0x00a0	 6e6e 6563 7469 6f6e 3a20 636c 6f73 650d	nnection:.close.=0A=
0x00b0	 0a43 6f6e 7465 6e74 2d54 7970 653a 2074	.Content-Type:.t=0A=
0x00c0	 6578 742f 6874 6d6c 0d0a 0d0a 3c21 444f	ext/html....<!DO=0A=
0x00d0	 4354 5950 4520 4854 4d4c 2050 5542 4c49	CTYPE.HTML.PUBLI=0A=
0x00e0	 4320 222d 2f2f 5733 432f 2f44 5444 2048	C."-//W3C//DTD.H=0A=
0x00f0	 544d 4c20 332e 3220 4669 6e61 6c2f 2f45	TML.3.2.Final//E=0A=
0x0100	 4e22 3e0a 3c48 544d 4c3e 3c48 4541 443e	N">.<HTML><HEAD>=0A=
0x0110	 3c54 4954 4c45 3e53 6c61 7368 646f 743a	<TITLE>Slashdot:=0A=
0x0120	 204e 6577 7320 666f 7220 6e65 7264 732c	.News.for.nerds,=0A=
0x0130	 2073 7475 6666 2074 6861 7420 6d61 7474	.stuff.that.matt=0A=
0x0140	 6572 733c 2f54 4954 4c45 3e0a 203c 2f48	ers</TITLE>..</H=0A=
0x0150	 4541 443e 0a3c 424f 4459 2062 6763 6f6c	EAD>.<BODY.bgcol=0A=
0x0160	 6f72 3d22 2330 3030 3030 3022 2074 6578	or=3D"#000000".tex=0A=
=0A=
***Page loads normally
------=_NextPart_000_0003_01BFD494.868B7D00--



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000201bfd4cf$32e8ce60$0301a8c0>