From owner-freebsd-pf@FreeBSD.ORG Sat Jul 30 13:01:37 2005 Return-Path: X-Original-To: pf@freebsd.org Delivered-To: freebsd-pf@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E8BEF16A41F for ; Sat, 30 Jul 2005 13:01:37 +0000 (GMT) (envelope-from gpt@tirloni.org) Received: from srv-03.bs2.com.br (srv-03.bs2.com.br [200.203.183.32]) by mx1.FreeBSD.org (Postfix) with ESMTP id AD99643D49 for ; Sat, 30 Jul 2005 13:01:33 +0000 (GMT) (envelope-from gpt@tirloni.org) Received: from localhost (localhost.bs2.com.br [127.0.0.1]) by srv-03.bs2.com.br (Postfix) with ESMTP id 1D5FB4B4A8 for ; Sat, 30 Jul 2005 10:02:01 -0300 (BRT) Received: from [172.16.12.100] (unknown [201.15.55.66]) by srv-03.bs2.com.br (Postfix) with ESMTP id BAFF24B496 for ; Sat, 30 Jul 2005 10:02:00 -0300 (BRT) Message-ID: <42EB7A2A.3080701@tirloni.org> Date: Sat, 30 Jul 2005 10:01:30 -0300 From: "Giovanni P. Tirloni" User-Agent: Mozilla Thunderbird 1.0.6-1.4.1.centos4 (X11/20050721) X-Accept-Language: en-us, en MIME-Version: 1.0 To: pf@freebsd.org References: <42E8D3D5.4030300@tirloni.org> <200507281458.56534.max@love2party.net> <42E8DBC6.6060907@tirloni.org> In-Reply-To: <42E8DBC6.6060907@tirloni.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Subject: Re: rdr not working for transparent http - 5.4-stable X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 30 Jul 2005 13:01:38 -0000 Giovanni P. Tirloni wrote: > Max Laier wrote: > >> One thing comes to my mind: What does >> $sysctl net.inet.ip.forwarding >> say? > > > # sysctl net.inet.ip.forwarding > net.inet.ip.forwarding: 1 > > I had some tweaks in /etc/sysctl but disabling them didn't help either. > > #net.inet.ip.check_interface=1 > #net.inet.tcp.blackhole=2 > #net.inet.udp.blackhole=1 > I forgot to mention this box had ipfw+dummnyet (with two queues) activated. I disabled ipfw in the kernel and pf rdr worked again! Just removing the ipfw rules didn't work. Weird enough, I don't have dummynet on the other 2 machines that have the same problem. But ipfw is compiled in but disabled. I'll try to disable ipfw on the other boxes and see what happens there to confirm this. -- Giovanni P. Tirloni / gpt@tirloni.org