From owner-freebsd-questions@FreeBSD.ORG Sat Jan 3 08:31:58 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B51B116A4CE for ; Sat, 3 Jan 2004 08:31:58 -0800 (PST) Received: from mail.gmx.net (pop.gmx.net [213.165.64.20]) by mx1.FreeBSD.org (Postfix) with SMTP id F349343D70 for ; Sat, 3 Jan 2004 08:31:53 -0800 (PST) (envelope-from karl.juchen@gmx.de) Received: (qmail 3375 invoked by uid 0); 3 Jan 2004 16:31:52 -0000 Received: from 217.9.28.142 by www21.gmx.net with HTTP; Sat, 3 Jan 2004 17:31:52 +0100 (MET) Date: Sat, 3 Jan 2004 17:31:52 +0100 (MET) From: "Karl Juchen" To: freebsd-questions@freebsd.org MIME-Version: 1.0 X-Priority: 3 (Normal) X-Authenticated: #16201734 Message-ID: <26455.1073147512@www21.gmx.net> X-Mailer: WWW-Mail 1.6 (Global Message Exchange) X-Flags: 0001 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit Subject: ppp idle timer X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Jan 2004 16:31:58 -0000 Hello! I'm using FreeBSD 4.9 and I want to set up an internet link using pppoe and dial on demand. On principle it works, but I've a problem with the idle timer and packet filtering: I want that outgoing icmp (destination unreachable) and tcp (fin/rst) packages do not change the idle timer. Relevant parts of my configuration: set timeout 120 set filter out 0 permit 0/0 0/0 icmp src eq 3 timeout X set filter out 1 permit 0/0 0/0 tcp finrst timeout X set filter out 2 permit 0/0 0/0 The man page ppp(8) says: The timeout value adjusts the current idle timeout to at least secs seconds. If a timeout is given in the alive filter as well as in the in/out filter, the in/out value is used. If no time- out is given, the default timeout (set using set timeout and defaulting to 180 seconds) is used. So, if I understand it correctly, my configuration with X replaced by 0 should do it, but it does not: the rules have no effect at all. When replacing X by a number of seconds > 0 it works in a way but the behaviour is not, what I would have expected: a maching rule sets timeout to exactly X, even if X is less than the old timeout value, while I interpreted the man page: increase the timeout if necessary (i.e. if X > current timeout). So what am I doing wrong, how can I achieve the wanted behaviour? Regards, Karl -- +++ GMX - die erste Adresse für Mail, Message, More +++ Neu: Preissenkung für MMS und FreeMMS! http://www.gmx.net