gentoo1 wrote:
> 
> Hello :)
> 
> I use OpenBSD 4.1 for gateway for my laptop. I set in my pf.conf file :
>  nat on fxp0 from rl0:network to any -> fxp0 ..and other rules. OK and 
> I have Internet on my laptop. Worked fine! But yesterday  my ISP set ttl
> to 0  ---> ttl=0... and now i try to change this value but unsuccessful...
> 
> I put this in my pf.conf but ttl is still zero.:
> 
> scrub out on $ext_if min-ttl 10
> ....
> scrub in on $ext_if all fragment reassemble min-ttl 15 max-mss 1400
> I use both options : in and out - unsuccessful...
> ################################################
> pfctl  -sr show :
> 
> scrub in all fragment reassemble
> scrub in on fxp0 all min-ttl 15 max-mss 1400 fragment reassemble
> scrub out on fxp0 all min-ttl 15 max-mss 1400 fragment reassemble
> scrub in on fxp0 all no-df fragment reassemble
> scrub on fxp0 all reassemble tcp fragment reassemble
> ################################################
> And ping form openbsd to  nabble.com is with tll=0:
> ping nabble.com
> PING nabble.com (216.139.236.162): 56 data bytes
> 64 bytes from 216.139.236.162: icmp_seq=0 ttl=0 time=165.931 ms
> 64 bytes from 216.139.236.162: icmp_seq=1 ttl=0 time=164.822 ms
> --- nabble.com ping statistics ---
> 2 packets transmitted, 2 packets received, 0.0% packet loss
> round-trip min/avg/max/std-dev = 164.822/165.376/165.931/0.687 ms
> ==> And on my laptop  I don't see  anything behind openbsd gw.
> 
> In linux case --> I just add this rule in iptables and i change  ttl
> successfully :
> iptables -t mangle -A PREROUTING -i eth1 -j TTL --ttl-inc 2.
> 
> But please let me know how I can change ttl in OpenBSD.
> 
> Kind Regards
> 

Issue solved!

right:
# scrub
scrub in on  $ext_if all min-ttl 15 max-mss 1400 fragment reassemble
scrub out on $ext_if all min-ttl 15 max-mss 1400 fragment reassemble

scrub in

scrub in all fragment reassemble
scrub in on $ext_if all no-df fragment reassemble
scrub on $ext_if all reassemble tcp fragment reassemble

Thanks to Nick Gustas!
-- 
View this message in context: 
http://www.nabble.com/OpenBSD-4.1----NAT-%2B-ttl%3D0-trouble-tp14463336p14477341.html
Sent from the openbsd user - misc mailing list archive at Nabble.com.

Reply via email to