Re: Problems after IP change

From: Daniela (dgw_at_liwest.at)
Date: 07/28/04

  • Next message: epilogue: "Re: Antialiased fonts in Linux applications" 
    To: "Steve Bertrand" <iaccounts@ibctech.ca>
Date: Wed, 28 Jul 2004 16:37:23 +0000

    On Wednesday 28 July 2004 15:23, Steve Bertrand wrote:
    > > Yes, it works, but of course I can't leave this rule in all the time.
    >
    > The SYN/ACK packet that comes back from the remote server is denied by
    > rule
    >
    > > 01900. But it should be allowed by the check-state rule.
    > >
    > >> Also, I know you haven't changed anything, but what does the output
    >
    > from
    >
    > >> this command state?:
    > >> # sysctl net.inet.ip.forwarding
    > >
    > > It is set to 1. I changed this a long time ago.
    >
    > I figured so...what happens if you add 'keep-state' to rules 20000, 20002
    > and 20003?

    Nothing.
    BTW, here we have the problem: The initial SYN packet isn't matched by rule
    11700 (setup keep-state). Setup means the SYN flag is set, right? So why is
    it not matched? If I remove the "setup" keyword to match all outgoing
    packets, the SYN/ACK from the server is still denied by rule 01900.

    _______________________________________________
    freebsd-questions@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"

  • Next message: epilogue: "Re: Antialiased fonts in Linux applications"

    Relevant Pages

    • RE: Very Odd problem,server obssesed with client
      ... the SYN packet, the OS of Admin3, whether it is a member server or Domain ... | that ACK response,that does not come.It will wait until the ACK ... | cause the Citrix server to send a SYN packet to Admin3,and hang opening ...
      (microsoft.public.windows.server.networking)
    • Re: MCE 2005 Xbox 360 Extender PC Setup Cannot find Xbox 360 on Ne
      ... Packet mon shows no network packets comming from my PC when the Xbox ... 360 Setup is 'searching' for the Xbox on the network. ... This is typically due to firewall issues, ...
      (microsoft.public.windows.mediacenter)
    • Re: OT: He Shoots, He Misses- NOT ME!
      ... allows the sender of a packet to specify its IP address. ... responses to the true location of the IP address rather than where it ... situations where you need to interact with a remote server, ... spoofed IP address because I need to make the request and then have the ...
      (rec.outdoors.rv-travel)
    • Re: IPFW update frequency
      ... Your tests presumably have little if any contention on the lock. ... the lock acquisition cost is in the 'setup' part but i cannot tell ... main rule loop of ipfw to speed things up. ... last year with an Agilent packet generator and hwpmc. ...
      (freebsd-net)
    • Re: ipfw dosn"t want to run a rule ???? is it possible ?
      ... I don't think there is such a thing as a UDP "setup" packet, ...
      (freebsd-questions)
    • Quantcast