Re: ipfw: denied frags

2006-05-04 Thread Dennis Olvany
Dennis Olvany wrote: May 4 19:06:02 b1 kernel: ipfw: 10600 Deny UDP 195.16.84.250 192.168.102.10 in via ste0 (frag 33624:[EMAIL PROTECTED]) I see. The frags don't contain ports and therefore do not match the dynamic rule. A static rule took care of it. ___

ipfw: denied frags

2006-05-04 Thread Dennis Olvany
I've traced a problem to IPFW dropping frags, but have no idea what to make of the log or how to go about fixing the issue. Please advise. Possibly, someone could decode this: (frag 13695:[EMAIL PROTECTED]). 10600 is a default deny and a dynamic rule exists to allow this traffic. The only pro