-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Erich Titl wrote:
> Hi everybody
>
> I ran into a problem today with a site which wanted to upload some
html data using frontpage. I saw the ftp STOR request qoing out from the
firewall but no data. The log showed icmp type 3 packets blocked at the
inside interface specifying a mtu size of 1492, typical for ADSL.
>
> In shorewall.conf I had set CLAMPMMS to true.
>
> I had to allow ICMP type 3 from the firewall to the local net in order
to get this transfer working.
>
> Anyone with similar experience?
>

The standard Shorewall sample configuration (2- and 3-interface), both
include this rule:

ACCEPT  fw      all     icmp

This rule has been missing in the .lrp configurations. I added it to the
development thread 'rules' file two weeks ago.

- -Tom
- --
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFBZWvFO/MAbZfjDLIRAt66AJ4pQiqo3AUbbr8bYu1TfrMpDAHpMgCeJvjG
L0POUAfj9HWzKDJl5kmeBQk=
=6jKZ
-----END PGP SIGNATURE-----


-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to