Date: Thu, 20 Jan 2000 09:40:31 -0800 (PST)
From: "Rodney W. Grimes" <freebsd@gndrsh.dnsmgr.net>
To: oogali@intranova.net (Omachonu Ogali)
Cc: andre@arkaine.com (Andre Chang), sh@eclipse.net.uk ('Stuart Henderson'), briang@expnet.net (Brian Gallucci), isp@FreeBSD.ORG, freebsd-ipfw@FreeBSD.ORG
Subject: Re: New Firewall
Message-ID: <200001201740.JAA54999@gndrsh.dnsmgr.net>
In-Reply-To: <Pine.BSF.4.10.10001200646350.4166-100000@hydrant.intranova.net> from Omachonu Ogali at "Jan 20, 2000 06:50:18 am"
next in thread | previous in thread | raw e-mail | index | archive | help
> I'm not sure what he meant by ICMP fragmentation-needed messages, but > yes, ICMP is needed for reliable communication and faster communication > (primarily unreachables), so you can allow ICMP to pass through but I > wouldn't recommend it after seeing 24Mbps smurfs come through... > > And in your case Andre, ICMP fragmentation has nothing to do with your > sendmail problem, that shows that your connection is breaking/dropping > after a while, maybe the remote side is closing the connection > prematurely...check it out by telnetting to the remote host on port 25 and > imitate a regular SMTP transaction to find the problem... If Andre is filtering ICMP 3.4 (ICMP_UNREACH.ICMP_UNREACH_NEEDFRAG) it certainly could have to do with his sendmail problem. -- Rod Grimes - KD7CAX @ CN85sl - (RWG25) rgrimes@gndrsh.dnsmgr.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200001201740.JAA54999>