Hi! Well, I'm not a PF professional, and you have rather advanced setup. So, someone with good PF experience is needed here.
2008/3/5, Владислав Недосекин <[EMAIL PROTECTED]>: > Hi, i understand that there is too little facts to analyze, but maybe some > one have the same problem and also i can provide you information. > TCP dump 192.168.200.11 - ip of PC with vista > # tcpdump | grep 192.168.200.11 > tcpdump: verbose output suppressed, use -v or -vv for full protocol decode > listening on ste0, link-type EN10MB (Ethernet), capture size 96 bytes > ^C^C^C^C3 packets captured > 433 packets received by filter > 0 packets dropped by kernel > # tcpdump | grep 192.168.200.111 > tcpdump: verbose output suppressed, use -v or -vv for full protocol decode > listening on ste0, link-type EN10MB (Ethernet), capture size 96 bytes ... > 13:51:47.676471 arp who-has 192.168.200.200 (00:1d:60:ce:74:e8 (oui > Unknown)) tell 192.168.200.111 What's that? ... > PF.CONF > ... > # Block Policy > block in log all > block in log quick from no-route to any > block in log quick on $ext_if from <rfc1918> > block return-icmp out log quick on $ext_if to <rfc1918> > antispoof quick for $int_if > antispoof quick for $ext_if > block out from 192.168.0.146 to any Does log shows anything interesting? I mean dropped packets. What about SQUID's log? Some special auth? Client's insisting on HTTP/1.1? Some glitches with transparent proxying (if I get it right from your PF config)? > i've tried > sysctl net.inet.tcp.rfc1323=0 > but it does't help. > > And about ip6 it is disabled, but in enabled state it does't help. Dropped by PF? -- Dennis Melentyev
_______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to "[EMAIL PROTECTED]"
