Date: Mon, 20 Jun 2005 17:26:05 -0700 From: Gary Kline <kline@tao.thought.org> To: Michal Mertl <mime@traveller.cz> Cc: Gary Kline <kline@tao.thought.org>, FreeBSD Mailing List <freebsd-questions@FreeBSD.ORG> Subject: Re: any ipf wizards out there? Message-ID: <20050621002604.GA27726@thought.org> In-Reply-To: <1119301097.1210.3.camel@genius1.i.cz> References: <20050620163227.GA68751@thought.org> <1119301097.1210.3.camel@genius1.i.cz>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Jun 20, 2005 at 10:58:17PM +0200, Michal Mertl wrote: > Gary Kline wrote: > > Folks, > > > > A couple weeks ago I realized that my ipf ruleset was messing > > up my web access ... ad had been for months I just tried an > > older, simpler ipf.rules. Same results. Can anybody out there > > in FreeBSD-land clue me in please? > > Without any concrete information it's hard to guess. The only thing I > can think of is that you don't allow outgoing ICMP packet-too-big. This > will make it for users with small MTU (e.g. some dial-up, PPPoE (ADSL) > impossible to receive bigger pages (longer then their MTU minus > something). > > Did you see my ipf file, listed completely? I have a couplr or more remote sites and can reach them with links | lynx without my ipf.rules. EVErything just-works with the firewall off; turned on and zip. (*****) gary > > > > > -- Gary Kline kline@thought.org www.thought.org Public service Unix
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050621002604.GA27726>