On Mon, 09-Aug-2004 at 18:37:39 +0200, Pawel Malachowski wrote:
> On Fri, Aug 06, 2004 at 12:54:08AM +0200, Pawel Malachowski wrote:
>
> > I can see weird behavior of this command:
> > traceroute -s privateIP -P UDP dst
> > Outgoing UDP packets are translated, ICMP time-exceded message comes back,
> > but traceroute shows '* * *'. ;)
>
> v3.4.35 import breaks things on my RELENG_4 box. FYI:
>
> With this ruleset, UDP-traceroute doesn't work (ICMP- works):
> map fxp0 172.27.201.1/24 -> public/32 proxy port ftp ftp/tcp
> map fxp0 172.27.201.1/24 -> public/32 portmap tcp/udp auto
> map fxp0 172.27.201.1/24 -> public/32
>
> % traceroute -s 172.27.201.1 -P udp www.yahoo.com
> traceroute to www.yahoo.akadns.net (216.109.118.74) from 172.27.201.1, 64
> hops max, 44 byte packets
> 1 * * *
> 2 * * *
> 3 * * *
> 4 * * *
> 5 * * *
> 6 * * *
> 7 * * *
> 8 * *^C
> ...
Since I was tired of waiting another 4 months until this is getting
fixed (nobody seems to be interested in ipfilter anymore), I have
patched ip_nat.c and it is working again.
I am sure the patch is ugly/wrong/bad/completely_insane but it works
and I haven't seen any side effects so far. If anybody is interested:
--- sys/contrib/ipfilter/netinet/ip_nat.c.ORI Mon Jul 5 09:28:35 2004
+++ sys/contrib/ipfilter/netinet/ip_nat.c Tue Nov 9 18:49:30 2004
@@ -1783,7 +1783,7 @@
* Fix UDP pseudo header checksum to compensate for the
* IP address change.
*/
- if ((oip->ip_p == IPPROTO_UDP) && (dlen >= 8) && udp->uh_sum) {
+ if ((oip->ip_p == IPPROTO_UDP) && (dlen >= 8)) {
/*
* The UDP checksum is optional, only adjust it
* if it has been set.
Maybe this helps Darren to find the real problem...
-Andre
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
