Unknown Extension Header(103)

2006-06-08 Thread John Hay
misleading I think. John -- John Hay -- [EMAIL PROTECTED] / [EMAIL PROTECTED] Index: ip_fw2.c === RCS file: /home/ncvs/src/sys/netinet/ip_fw2.c,v retrieving revision 1.106.2.13 diff -u -r1.106.2.13 ip_fw2.c --- ip_fw2.c2 Jun 2006 04:02

ipfw buffers too small?

2006-09-16 Thread John Hay
() not be bigger? And the more important question, should it not have some bounds checking? John -- John Hay -- [EMAIL PROTECTED] / [EMAIL PROTECTED] ___ freebsd-ipfw@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw To

Re: bin/102422: [patch] ipfw & kernel problems where firewall rules aren't interpreted correctly

2006-09-30 Thread John Hay
Synopsis: [patch] ipfw & kernel problems where firewall rules aren't interpreted correctly State-Changed-From-To: open->closed State-Changed-By: jhay State-Changed-When: Sat Sep 30 14:15:01 UTC 2006 State-Changed-Why: Committed the fixes by Andrey for parts 1 and 3. Part 2 was already fixed. Als

ipfw handling of ipv6 fragments

2006-12-12 Thread John Hay
/* According to RFC2765 3.1 offset can be 0 */ args->f_id.frag_id6 = ntohl(((struct ip6_frag *)ulp)->ip6f_ident); ulp = NULL; John -- John

Re: IPFW + Portforwarding

2008-10-20 Thread John Hay
here it is going out and not in. Fwd only works when packets are out bound. John -- John Hay -- [EMAIL PROTECTED] / [EMAIL PROTECTED] ___ freebsd-ipfw@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: IPFW + Portforwarding

2008-10-20 Thread John Hay
On Tue, Oct 21, 2008 at 08:47:12AM +0400, Roman Kurakin wrote: > John Hay wrote: > >On Mon, Oct 20, 2008 at 11:19:22PM +0200, Leander S. wrote: > > > >>Hi, > >> > >>I'm trying to set up something like a HotSpot. Goal is it to force > &g

Re: [ipfw patch - add ipv6 support for table mechanism] request for testing/commit

2009-05-07 Thread John Hay
sys/netinet/ip_fw.h /usr/include > fbsd1# ll /usr/include | grep ip_fw.h > -rw-r--r-- 1 root wheel 20916 May 8 02:04 ip_fw.h > You are looking in the wrong place: # find /usr/include -name ip_fw.h /usr/include/netinet/ip_fw.h That is the file you should replace. John -- John Hay -

ipfw nat and smaller wan mtu

2022-12-07 Thread John Hay
Hi, What would the proper ipfw rules be to make nat work and properly get the icmp too big packets back to a local host if the wan interface needs a smaller mtu? I'm using a FreeBSD machine as router/firewall, but its wan interface needs a smaller mtu (1392) than the default ethernet mtu. I have

Re: ipfw nat and smaller wan mtu

2022-12-07 Thread John Hay
int accumulate, accumulate2; struct in_addr original_address; On Wed, 7 Dec 2022 at 16:33, John Hay wrote: > Hi, > > What would the proper ipfw rules be to make nat work and properly get the > icmp too big packets back to a local host if t