Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 5 Feb 2004 13:01:37 -0500 (EST)
From:      "Stephen L Martin" <freebsd@jyroscop.cotse.net>
To:        alexb@mail.bg
Cc:        freebsd-questions@freebsd.org
Subject:   Re: forwarding with ttl=1
Message-ID:  <anlyb3Njb3A=.e2bcbd7903a99938af0db0b2762b95c5@1076004097.dissimulo.com>
In-Reply-To: <004f01c3ebea$5974d750$0200a8c0@ALIENX>
References:  <004f01c3ebea$5974d750$0200a8c0@ALIENX>

next in thread | previous in thread | raw e-mail | index | archive | help
Alex,

When posting please wrap your lines...they are easier to read and some
MUA's don't deal well with them...including mine :) Thanks.

This situation is kind of funny, I've never heard of an ISP doing this. I
belive what you want to do is, if you are using IpFilter, use the
fastroute keyword. You can find more about it at the link[1] posted below.
Just do a search on the page for fastroute.

There are probably options for the alternate packet filters (ipfw, pf)
also. Just read the howto corresponding to the packet filters name and you
should find out some more information.

[1]http://www.obfuscation.org/ipf/ipf-howto.txt

--Stephen

> Hi All
>
> I am newbie with configuring networks under FreeBSD . I have small network
> with gateway running on FreeBSD 5.2 Release .My ISP offers me pppoe
> service for connecting to Internet . I didn't have problems with
> configuring ppp with pppoe . I used nat option wchich works fine for
> masquerading the local network from the world . The problem is that the
> ISP's gateway returns every time packets with ttl=1 which makes further
> forwarding impossible . My gateway returns icmp error mesage "time
> exceeded" and discards packets . I want to know if I made some mistake
> with configuring nat service or if not what is the solution of the problem
> ? Is there any service that can increment ttl and process the packet ? I
> tried to avoid the checking of ttl in the ip_forward() function in
> ip_input.c and skipping the decrement of ttl and everything works fine but
> i think that this is very ugly kernel hack . Probably there is an easy and
> elegant solution . Any ideas ?
>
> please excuse my English



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?anlyb3Njb3A=.e2bcbd7903a99938af0db0b2762b95c5>