On 1/15/2011 at 8:00 AM David Walker wrote:

Hi David,

|[snip]
|
|What OS are we talking about now?

I had been running   OpenBSD 4.7 GENERIC#558 i386

Yesterday I installed (not upgraded, but a fresh install)

  OpenBSD 4.8 GENERIC#136 i386


and the ICMP traceroutes now work as expected.

The sysctl.conf settings were the same in both the 4.7 and the 4.8
install.  I am using the same pf rulesets that I had been using.  I
don't know of any other setting or config file that might affect pf in
the manner I saw.


|Not to throw curve balls but I had exactly the same problem as you
|initially during 4.7 then at some point it came good (so the opposite
|to your situation).
|I did change my pf on the odd occasion and thought little of it.

Interesting.


|[big snip]


|Not to be captain obvious but Windows (older versions) have a packet
|filter, of course now it's kernel mode all the way with Windows
|Firewall and obviously FreeBSD has something - pf is default now
|right?

pf (nor any of the other two firewalls available of FreeBSD) was not
enabled on FreeBSD.  The packet filters and firewalls were disabled on
any Windows box.


|[snip]


In any case, now that I've moved to OpenBSD 4.8 for the firewall/router
everything is working as expected now.  I can traceroute from the
FreeBSD client, and Windows without a problem.


|
|Best wishes.


Thanks for hanging in there and helping me think through this.

Reply via email to