Re: [fpc-devel] webserver

2005-03-31 Thread Micha Nelissen
On Thu, 31 Mar 2005 10:51:09 +0200 Micha Nelissen <[EMAIL PROTECTED]> wrote: > Linux firewall should have something like: > > iptables -A INPUT -p icmp --icmp-type fragmentation-needed -j ACCEPT And also in FORWARD and OUTPUT, but it may be that you already have a rule to allow 'RELATED' traffi

Re: [fpc-devel] webserver

2005-03-31 Thread Micha Nelissen
On Wed, 30 Mar 2005 22:18:24 +0200 (CEST) Michael Van Canneyt <[EMAIL PROTECTED]> wrote: > > > On Wed, 30 Mar 2005, Micha Nelissen wrote: > > > Yes, any sensible sysadmin ought to know that ICMP fragment error > > packets (type 3, code 4?) should always be allowed. > > Can you please translate

Re: [fpc-devel] webserver

2005-03-30 Thread Tomas Hajny
Date sent: Thu, 31 Mar 2005 02:41:30 +0200 (Romance Daylight Time) From: Michael Van Canneyt <[EMAIL PROTECTED]> To: FPC developers' list Subject: Re: [fpc-devel] webserver Send reply to: FPC devel

Re: [fpc-devel] webserver

2005-03-30 Thread Michael Van Canneyt
On Thu, 31 Mar 2005, Daniel Herzog wrote: > Michael Van Canneyt schrieb: > > > > On Wed, 30 Mar 2005, Johannes Berg wrote: > > > > > >>On Wed, 2005-03-30 at 21:45 +0200, Marco van de Voort wrote: > >> > >> > >>>Same here, and I can ping www.freepascal.org till 8184. > >> > >>The size at which yo

Re: [fpc-devel] webserver

2005-03-30 Thread Daniel Herzog
Michael Van Canneyt schrieb: > > On Wed, 30 Mar 2005, Johannes Berg wrote: > > >>On Wed, 2005-03-30 at 21:45 +0200, Marco van de Voort wrote: >> >> >>>Same here, and I can ping www.freepascal.org till 8184. >> >>The size at which you can ping www.freepascal.org isn't relevant, that >>just means

Re: [fpc-devel] webserver

2005-03-30 Thread Alexey Barkovoy
However, I just tried to ping from www.freepascal.org to the machine mentioned here by someone (xzone.dyndns.org) and packets with size of 16000 went through without problems... Not sure will this help but today I can access www.freepascal.org from the same machine that has not been able to do thi

Re: [fpc-devel] webserver

2005-03-30 Thread Tomas Hajny
Date sent: Wed, 30 Mar 2005 23:44:20 +0200 (CEST) From: Michael Van Canneyt <[EMAIL PROTECTED]> To: FPC developers' list Subject: Re: [fpc-devel] webserver Send reply to: FPC developers' list

Re: [fpc-devel] webserver

2005-03-30 Thread Johannes Berg
On Wed, 2005-03-30 at 23:44 +0200, Michael Van Canneyt wrote: > That is what I did: I pinged www.google.be from www.freepascal.org. > and the maximum size was 1472. You should be able to ping much higher unless you do 'ping -M dont ...' since The fact that you cannot suggests that there may be s

Re: [fpc-devel] webserver

2005-03-30 Thread Michael Van Canneyt
On Wed, 30 Mar 2005, Johannes Berg wrote: > On Wed, 2005-03-30 at 21:45 +0200, Marco van de Voort wrote: > > > Same here, and I can ping www.freepascal.org till 8184. > > The size at which you can ping www.freepascal.org isn't relevant, that > just means that you are not blocking 'fragmentatio

Re: [fpc-devel] webserver

2005-03-30 Thread Johannes Berg
On Wed, 2005-03-30 at 21:45 +0200, Marco van de Voort wrote: > Same here, and I can ping www.freepascal.org till 8184. The size at which you can ping www.freepascal.org isn't relevant, that just means that you are not blocking 'fragmentation needed' packets. Interesting might be the size at whi

Re: [fpc-devel] webserver

2005-03-30 Thread Daniel Herzog
>From the ping tests that have just been sent in, it's clear that it works for high MTUs also. But it doesnt neccessarily show that any "Fragmentation needed" packages can reach the server - which is the thing we need to proof or disproof, I'd say... And i'm sorry - i have no idea how this could b

Re: [fpc-devel] webserver

2005-03-30 Thread Marco van de Voort
> On Wed, 30 Mar 2005, Daniel Herzog wrote: > > > > > > > you could maybe try to ping google or something with huge package. > > remember to add the header size in mind. > > Works with size up to 1472. (+28=1500, so this figures) > Conslusion you pull from this test ? Same here, and I can ping

Re: [fpc-devel] webserver

2005-03-30 Thread Michael Van Canneyt
On Wed, 30 Mar 2005, Daniel Herzog wrote: > Michael Van Canneyt schrieb: > > > > On Wed, 30 Mar 2005, Daniel Herzog wrote: > > > > > >>Peter Vreman schrieb: > >> > Jonas Maebe schrieb: > > > >On 29 mrt 2005, at 16:40, Daniel Herzog wrote: > > > > > > > >>Here

Re: [fpc-devel] webserver

2005-03-30 Thread Michael Van Canneyt
On Wed, 30 Mar 2005, Johannes Berg wrote: > On Wed, 2005-03-30 at 22:17 +0200, Michael Van Canneyt wrote: > > > I don't think it is the server, as the MTU size of the server didn't change. > > > > The router is outside my control; It's controlled by the ISP; > > So there is nothing I can do a

Re: [fpc-devel] webserver

2005-03-30 Thread Daniel Herzog
Michael Van Canneyt schrieb: > > On Wed, 30 Mar 2005, Daniel Herzog wrote: > > >>Peter Vreman schrieb: >> Jonas Maebe schrieb: >On 29 mrt 2005, at 16:40, Daniel Herzog wrote: > > > >>Here it doesnt. I even tried to change the mtu of all relevant systems >>to

Re: [fpc-devel] webserver

2005-03-30 Thread Daniel Herzog
Michael Van Canneyt schrieb: > > On Wed, 30 Mar 2005, Micha Nelissen wrote: > > >>On Wed, 30 Mar 2005 19:24:13 +0200 >>Daniel Herzog <[EMAIL PROTECTED]> wrote: >> >> >>>Quite a few now said it might be the case that it's firewall blocks all >>>icmp packages. Try lowering the servers mtu for the

Re: [fpc-devel] webserver

2005-03-30 Thread Johannes Berg
On Wed, 2005-03-30 at 22:17 +0200, Michael Van Canneyt wrote: > I don't think it is the server, as the MTU size of the server didn't change. > > The router is outside my control; It's controlled by the ISP; > So there is nothing I can do about it. If you can tell me how to determine > it's MTU s

Re: [fpc-devel] webserver

2005-03-30 Thread Michael Van Canneyt
On Wed, 30 Mar 2005, Micha Nelissen wrote: > On Wed, 30 Mar 2005 19:24:13 +0200 > Daniel Herzog <[EMAIL PROTECTED]> wrote: > > > Quite a few now said it might be the case that it's firewall blocks all > > icmp packages. Try lowering the servers mtu for the fun with it. > > Yes, any sensible sy

Re: [fpc-devel] webserver

2005-03-30 Thread Michael Van Canneyt
On Wed, 30 Mar 2005, Daniel Herzog wrote: > Peter Vreman schrieb: > >>Jonas Maebe schrieb: > >> > >>>On 29 mrt 2005, at 16:40, Daniel Herzog wrote: > >>> > >>> > Here it doesnt. I even tried to change the mtu of all relevant systems > to 1400 instead of 1500, which didnt help also...and

Re: [fpc-devel] webserver

2005-03-30 Thread Micha Nelissen
On Wed, 30 Mar 2005 19:24:13 +0200 Daniel Herzog <[EMAIL PROTECTED]> wrote: > Quite a few now said it might be the case that it's firewall blocks all > icmp packages. Try lowering the servers mtu for the fun with it. Yes, any sensible sysadmin ought to know that ICMP fragment error packets (type

Re: [fpc-devel] webserver

2005-03-30 Thread Daniel Herzog
Peter Vreman schrieb: >>Jonas Maebe schrieb: >> >>>On 29 mrt 2005, at 16:40, Daniel Herzog wrote: >>> >>> Here it doesnt. I even tried to change the mtu of all relevant systems to 1400 instead of 1500, which didnt help also...and i cant lower my mtu far more...i want some troughput.

Re: [fpc-devel] webserver

2005-03-29 Thread Peter Vreman
> Jonas Maebe schrieb: >> >> On 29 mrt 2005, at 16:40, Daniel Herzog wrote: >> >>> Here it doesnt. I even tried to change the mtu of all relevant systems >>> to 1400 instead of 1500, which didnt help also...and i cant lower my >>> mtu >>> far more...i want some troughput. >> >> >> I don't know what

Re: [fpc-devel] webserver

2005-03-29 Thread Alexey Barkovoy
Try www.jp.freepascal.org as a workaround (works nice here), or the google cache. But I still will not be able to fill / browse bug reports! ___ fpc-devel maillist - fpc-devel@lists.freepascal.org http://lists.freepascal.org/mailman/listinfo/fpc-devel

Re: [fpc-devel] webserver

2005-03-29 Thread Daniel Herzog
>> ISP and consequently DNS has changed. Check the IP address. >> It should be 62.166.198.202 >> >> But you're the only one to report problems, which suggests the problem is >> somewhere on your side. Maybe a proxy ? > > > Well I'm having problems with www.freepascal.org for around a month now >

Re: [fpc-devel] webserver

2005-03-29 Thread Tony Maro
On Tue, 2005-03-29 at 21:56 +0400, Alexey Barkovoy wrote: > > But you're the only one to report problems, which suggests the problem is > > somewhere on your side. Maybe a proxy ? > > Well I'm having problems with www.freepascal.org for around a month now > (maybe > even more). Sometimes it's j

Re: [fpc-devel] webserver

2005-03-29 Thread Alexey Barkovoy
ISP and consequently DNS has changed. Check the IP address. It should be 62.166.198.202 But you're the only one to report problems, which suggests the problem is somewhere on your side. Maybe a proxy ? Well I'm having problems with www.freepascal.org for around a month now (maybe even more). Somet

Re: [fpc-devel] webserver

2005-03-29 Thread Daniel Herzog
Here it doesnt. I even tried to change the mtu of all relevant systems to 1400 instead of 1500, which didnt help also...and i cant lower my mtu far more...i want some troughput. >>> >>> >>>I don't know what or where the problem is, but you're the first person I >>>hear of who can't reac

Re: [fpc-devel] webserver

2005-03-29 Thread Michael Van Canneyt
On Tue, 29 Mar 2005, Daniel Herzog wrote: > Jonas Maebe schrieb: > > > > On 29 mrt 2005, at 16:40, Daniel Herzog wrote: > > > >> Here it doesnt. I even tried to change the mtu of all relevant systems > >> to 1400 instead of 1500, which didnt help also...and i cant lower my mtu > >> far more...

Re: [fpc-devel] webserver

2005-03-29 Thread Daniel Herzog
Jonas Maebe schrieb: > > On 29 mrt 2005, at 16:40, Daniel Herzog wrote: > >> Here it doesnt. I even tried to change the mtu of all relevant systems >> to 1400 instead of 1500, which didnt help also...and i cant lower my mtu >> far more...i want some troughput. > > > I don't know what or where t

Re: [fpc-devel] webserver

2005-03-29 Thread Jonas Maebe
On 29 mrt 2005, at 16:40, Daniel Herzog wrote: Here it doesnt. I even tried to change the mtu of all relevant systems to 1400 instead of 1500, which didnt help also...and i cant lower my mtu far more...i want some troughput. I don't know what or where the problem is, but you're the first person I

Re: [fpc-devel] webserver

2005-03-29 Thread Daniel Herzog
>>i cannot access http://www.freepascal.org/ for days. >> >>I can ping it, and wget establishes a connection ("200 OK" )but cant >>download any data. ftp and www.jp.freepascal.org work fine. >> >>please fix this, it worked nice here until the last week or so. > > > One of the sites of freepascal.

Re: [fpc-devel] webserver

2005-03-28 Thread Marco van de Voort
> i cannot access http://www.freepascal.org/ for days. > > I can ping it, and wget establishes a connection ("200 OK" )but cant > download any data. ftp and www.jp.freepascal.org work fine. > > please fix this, it worked nice here until the last week or so. One of the sites of freepascal.org had