Re: ipfw nat and smaller wan mtu

2022-12-07 Thread John Hay
umulate, accumulate2; struct in_addr original_address; On Wed, 7 Dec 2022 at 16:33, John Hay wrote: > Hi, > > What would the proper ipfw rules be to make nat work and properly get the > icmp too big packets back to a local host if the wan interface needs a > smaller mtu

ipfw nat and smaller wan mtu

2022-12-07 Thread John Hay
Hi, What would the proper ipfw rules be to make nat work and properly get the icmp too big packets back to a local host if the wan interface needs a smaller mtu? I'm using a FreeBSD machine as router/firewall, but its wan interface needs a smaller mtu (1392) than the default ethernet mtu. I have

Re: [ipfw patch - add ipv6 support for table mechanism] request for testing/commit

2009-05-08 Thread John Hay
That is the file you should replace. John -- John Hay -- john@meraka.csir.co.za / j...@freebsd.org ___ freebsd-ipfw@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw To unsubscribe, send any mail to freebsd-ipfw-unsubscr

Re: IPFW + Portforwarding

2008-10-21 Thread John Hay
On Tue, Oct 21, 2008 at 08:47:12AM +0400, Roman Kurakin wrote: John Hay wrote: On Mon, Oct 20, 2008 at 11:19:22PM +0200, Leander S. wrote: Hi, I'm trying to set up something like a HotSpot. Goal is it to force unregistred users to get redirected to the Captive Portalsite where

Re: IPFW + Portforwarding

2008-10-20 Thread John Hay
-- John Hay -- [EMAIL PROTECTED] / [EMAIL PROTECTED] ___ freebsd-ipfw@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw To unsubscribe, send any mail to [EMAIL PROTECTED]

ipfw handling of ipv6 fragments

2006-12-12 Thread John Hay
be 0 */ args-f_id.frag_id6 = ntohl(((struct ip6_frag *)ulp)-ip6f_ident); ulp = NULL; John -- John Hay -- [EMAIL PROTECTED] / [EMAIL PROTECTED] ___ freebsd

Re: bin/102422: [patch] ipfw kernel problems where firewall rules aren't interpreted correctly

2006-09-30 Thread John Hay
Synopsis: [patch] ipfw kernel problems where firewall rules aren't interpreted correctly State-Changed-From-To: open-closed State-Changed-By: jhay State-Changed-When: Sat Sep 30 14:15:01 UTC 2006 State-Changed-Why: Committed the fixes by Andrey for parts 1 and 3. Part 2 was already fixed. Also

Unknown Extension Header(103)

2006-06-08 Thread John Hay
misleading I think. John -- John Hay -- [EMAIL PROTECTED] / [EMAIL PROTECTED] Index: ip_fw2.c === RCS file: /home/ncvs/src/sys/netinet/ip_fw2.c,v retrieving revision 1.106.2.13 diff -u -r1.106.2.13 ip_fw2.c --- ip_fw2.c2 Jun 2006 04:02