Re: FreeBSD 6.3 gre and traceroute

2008-11-17 Thread Stephen Clark
Bjoern A. Zeeb wrote: On Fri, 14 Nov 2008, Robert Noland wrote: Hi, Also just using gre's without the underlying ipsec tunnels seems to work properly. The reason for this to my knowledge is: http://www.kame.net/dev/cvsweb2.cgi/kame/freebsd2/sys/netinet/ip_icmp.c#rev1.4 or looking at rece

Re: FreeBSD 6.3 gre and traceroute

2008-11-17 Thread Stephen Clark
Bjoern A. Zeeb wrote: On Fri, 14 Nov 2008, Robert Noland wrote: Hi, Also just using gre's without the underlying ipsec tunnels seems to work properly. The reason for this to my knowledge is: http://www.kame.net/dev/cvsweb2.cgi/kame/freebsd2/sys/netinet/ip_icmp.c#rev1.4 or looking at rece

Re: FreeBSD 6.3 gre and traceroute

2008-11-15 Thread Bjoern A. Zeeb
On Fri, 14 Nov 2008, Robert Noland wrote: Hi, Also just using gre's without the underlying ipsec tunnels seems to work properly. The reason for this to my knowledge is: http://www.kame.net/dev/cvsweb2.cgi/kame/freebsd2/sys/netinet/ip_icmp.c#rev1.4 or looking at recent freebsd code: http://fx

Re: FreeBSD 6.3 gre and traceroute

2008-11-14 Thread Robert Noland
On Fri, 2008-11-14 at 10:25 -0800, Julian Elischer wrote: > Stephen Clark wrote: > > Stephen Clark wrote: > > > > > 10.0.129.1 FreeBSD workstation > > ^ > > | > > | ethernet > > | > > v > > 10.0.128.1 Freebsd FW "A" > > ^ > > | > > | gre / ipsec

Re: FreeBSD 6.3 gre and traceroute

2008-11-14 Thread Stephen Clark
Julian Elischer wrote: Stephen Clark wrote: Stephen Clark wrote: 10.0.129.1 FreeBSD workstation ^ | | ethernet | v 10.0.128.1 Freebsd FW "A" ^ | | gre / ipsec | v 192.168.3.1 FreeBSD FW "B" ^ | | ethernet | v 192.168.3.86 linux workstation Also just using gre's without the

Re: FreeBSD 6.3 gre and traceroute

2008-11-14 Thread Julian Elischer
Stephen Clark wrote: Stephen Clark wrote: 10.0.129.1 FreeBSD workstation ^ | | ethernet | v 10.0.128.1 Freebsd FW "A" ^ | | gre / ipsec | v 192.168.3.1 FreeBSD FW "B" ^ | | ethernet | v 192.168.3.86 linux workstation Also just using gre's without the underlying ipsec tunnel

Re: FreeBSD 6.3 gre and traceroute

2008-11-14 Thread Stephen Clark
Stephen Clark wrote: Robert Noland wrote: On Thu, 2008-11-13 at 07:48 -0500, Stephen Clark wrote: Julian Elischer wrote: Stephen Clark wrote: Julian Elischer wrote: you will need to define the setup and question better. thanks.. cleaning it up a bit more... 10.0.129.1 FreeBSD workstation

Re: FreeBSD 6.3 gre and traceroute

2008-11-13 Thread Stephen Clark
Robert Noland wrote: On Thu, 2008-11-13 at 07:48 -0500, Stephen Clark wrote: Julian Elischer wrote: Stephen Clark wrote: Julian Elischer wrote: you will need to define the setup and question better. thanks.. cleaning it up a bit more... 10.0.129.1 FreeBSD workstation ^ | | ethernet | v

Re: FreeBSD 6.3 gre and traceroute

2008-11-13 Thread Robert Noland
On Thu, 2008-11-13 at 07:48 -0500, Stephen Clark wrote: > Julian Elischer wrote: > > Stephen Clark wrote: > >> Julian Elischer wrote: > > > >>> you will need to define the setup and question better. > > > > thanks.. cleaning it up a bit more... > > > > 10.0.129.1 FreeBSD workstation > > ^ > >

Re: FreeBSD 6.3 gre and traceroute

2008-11-13 Thread Stephen Clark
Julian Elischer wrote: Stephen Clark wrote: Julian Elischer wrote: you will need to define the setup and question better. thanks.. cleaning it up a bit more... 10.0.129.1 FreeBSD workstation ^ | | ethernet | v 10.0.128.1 Freebsd FW "A" ^ | | gre / ipsec | v 192.168.3.1 FreeBSD FW

Re: FreeBSD 6.3 gre and traceroute

2008-11-13 Thread Stephen Clark
Robert Noland wrote: On Wed, 2008-11-12 at 13:17 -0800, Julian Elischer wrote: Stephen Clark wrote: Julian Elischer wrote: you will need to define the setup and question better. thanks.. cleaning it up a bit more... 10.0.129.1 FreeBSD workstation ^ | | ethernet | v 10.0.128.1 Freeb

Re: FreeBSD 6.3 gre and traceroute

2008-11-12 Thread Robert Noland
On Wed, 2008-11-12 at 13:17 -0800, Julian Elischer wrote: > Stephen Clark wrote: > > Julian Elischer wrote: > > >> you will need to define the setup and question better. > > thanks.. cleaning it up a bit more... > > 10.0.129.1 FreeBSD workstation > ^ > | > | ethernet > | > v > 10.0.128

Re: FreeBSD 6.3 gre and traceroute

2008-11-12 Thread Julian Elischer
Stephen Clark wrote: Julian Elischer wrote: you will need to define the setup and question better. thanks.. cleaning it up a bit more... 10.0.129.1 FreeBSD workstation ^ | | ethernet | v 10.0.128.1 Freebsd FW "A" ^ | | gre / ipsec | v 192.168.3.1 FreeBSD FW "B" ^ | | ethernet

Re: FreeBSD 6.3 gre and traceroute

2008-11-12 Thread Stephen Clark
Julian Elischer wrote: Stephen Clark wrote: Hi, When I run traceroute thru a gre it doesn't seem to decrement the ttl, so I get * * * for that hop. Can this be fixed? Thanks, Steve you will need to define the setup and question better. TTL is controlled by the IP stack which is unaware of w

Re: FreeBSD 6.3 gre and traceroute

2008-11-12 Thread Julian Elischer
Stephen Clark wrote: Hi, When I run traceroute thru a gre it doesn't seem to decrement the ttl, so I get * * * for that hop. Can this be fixed? Thanks, Steve you will need to define the setup and question better. TTL is controlled by the IP stack which is unaware of which interface it came i

FreeBSD 6.3 gre and traceroute

2008-11-12 Thread Stephen Clark
Hi, When I run traceroute thru a gre it doesn't seem to decrement the ttl, so I get * * * for that hop. Can this be fixed? Thanks, Steve -- "They that give up essential liberty to obtain temporary safety, deserve neither liberty nor safety." (Ben Franklin) "The course of history shows that as