Re: default route

Tue, Dec 18, 2007 at 06:20:53PM +0100, vermaden wrote:
After reading this I feel that you have absolutely no packets on
either interfaces when your Linux box ping FreeBSD. But this
contradicts with your previous assertion that if ICMP packet comes
in on rl1, then it is reflected at rl0. Am I missing something?

Yes I must mislook that, rl0 also is 'dead' while Linux box pings
my FreeBSD box using net on rl1.

OK, so I feel that there are two points to check.

1. Firewall. Even if you're running GENERIC, firewall thingies
are compiled as kernel modules and can be loaded by the startup
scripts. The output of 'kldstat -v' will show what modules
are loaded. BPF is run before filtering, so it sees packets
that firewall can drop.

2. Enable ICMP verbose mode in the kernel: set the variable
'icmpprintfs' on the top of the /sys/netinet/ip_icmp.c
to 1 and define ICMPPRINTFS during kernel compilation via
'makeoptions ICMPPRINTFS=1'. After this you should watch for
kernel messages with the 'icmp' at the beginning of the line.

Hope this helps.
--
Eygene
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: default route
    ... in on rl1, then it is reflected at rl0. ... firewall thingies ... Enable ICMP verbose mode in the kernel: ...
    (freebsd-net)
  • Re: Kernel should not handle my ICMP Request
    ... not respond to my ICMP requests. ... I am writing my own ICMP packet sender and reciever ... How can I block so that Kernel should not handle ICMP packets but my ...
    (comp.os.linux.networking)
  • Re: Re: ICMP attacks
    ... > generates an ICMP "port unreachable" message for every port that does ... > To prevent you from generic ICMP based attacks that try to eat up your ... > a kernel hacker. ... following sysctl options so when a UDP or TCP packet is sent to a closed port ...
    (FreeBSD-Security)
  • Re: Help - Tried almost everything!
    ... still have no answer why the ICMP still goes out every ... >> a periodic router advertisement. ... >>>|>>installed the Firewall after I suspected a problem ... but this is just an ICMP packet that's ...
    (microsoft.public.security)
  • RE: ICMP unreachable question
    ... If I understood you correctly you are referring to the ICMP Error ... will be used to carry the MTU used for the link ... I'm interested in a particular ICMP packet which seems to change the ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)