From owner-freebsd-ipfw  Wed Jan 19 17:19:31 2000
Delivered-To: freebsd-ipfw@freebsd.org
Received: from zero.arkaine.com (zero.arkaine.com [206.217.210.40])
	by hub.freebsd.org (Postfix) with ESMTP
	id 8334414C2A; Wed, 19 Jan 2000 17:19:22 -0800 (PST)
	(envelope-from andre@arkaine.com)
Received: from s.arkaine.com (s.arkaine.com [192.168.10.10])
	by zero.arkaine.com (8.9.3/8.9.3) with ESMTP id VAA01053;
	Wed, 19 Jan 2000 21:15:00 -0500 (EST)
	(envelope-from andre@arkaine.com)
Received: by s.arkaine.com with Internet Mail Service (5.5.2650.21)
	id <ZNR80T6P>; Wed, 19 Jan 2000 20:22:24 -0500
Message-ID: <6C191944837ED311863A00104BC7598F774E@s.arkaine.com>
From: Andre Chang <andre@arkaine.com>
To: "'Stuart Henderson'" <sh@eclipse.net.uk>,
	Omachonu Ogali <oogali@intranova.net>
Cc: Brian Gallucci <briang@expnet.net>, isp@FreeBSD.ORG,
	freebsd-ipfw@FreeBSD.ORG
Subject: RE: New Firewall
Date: Wed, 19 Jan 2000 20:22:13 -0500
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2650.21)
Content-Type: text/plain;
	charset="iso-8859-1"
Sender: owner-freebsd-ipfw@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Mr. Henderson,

could you elaborate on the "icmp fragmentation-needed messages" please?

I'm trying to track down the following error:

Jan 18 09:02:56 `host_clipped` sendmail[49987]: NOQUEUE: SYSERR: putoutmsg
([xxx.xxx.xxx.xxx]): error on output channel sending "220 `hostname_clipped`
ESMTP Sendmail 8.9.3/8.9.3; Tue, 18 Jan 2000 09:02:56 GMT": Broken pipe

Thanks.

-----Original Message-----
From: Stuart Henderson [mailto:sh@eclipse.net.uk]
Sent: Tuesday, January 18, 2000 11:35 AM
To: Omachonu Ogali
Cc: Brian Gallucci; isp@FreeBSD.ORG; freebsd-ipfw@FreeBSD.ORG
Subject: Re: New Firewall


> The following rules can help if you are going to be running SMTP, HTTP,
> POP3, and HTTPS, delete what you don't need.

You also need to pass icmp fragmentation-needed messages if you
don't want to risk breaking access to/from some sites.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message