ipsec tunnels & packet length issues

2003-10-24 Thread Eric Masson
Hello, I'm facing a problem with the following setup : +-+ DMZ ++ LAN +--+ Internet -+ Tunnel Endpoint +-+ Fw +-+ Host | +-+ ++ +--+ "Tunnel Endpoint" : FreeBSD 4.8-RELEASE with fast

Re: ipsec tunnels & packet length issues

2003-10-24 Thread Michael Sierchio
Eric Masson wrote: If i reduce lan interface mtu on "Host" to approximately 1450, the tunnel works fine, so it seems that "Tunnel Endpoint" can't process correctly packets with a size of 1500 bytes. You should allow for an IP header with options and the ESP header, which is smaller than 1450. Fo

Re: IPFW rules being weird?

2003-10-24 Thread Crist J. Clark
On Fri, Oct 24, 2003 at 02:10:14AM +0100, Dan wrote: > Hello there. > Odd query for you. > > My setup is that sis0 is the ethernet which has the business cable modem > attached to it - which serves as a gateway. sis1 is the Ethernet which my > laptop connects to (wirelessly through a HE501 wirel

Bridging Packet Loss

2003-10-24 Thread Tim Wilde
I'm experiencing 2-3% packet loss in a bridging configuration on a FreeBSD 4.8-p13 box, Intel Celeron 700MHz with 256MB RAM, dual fxp NICs (it's a Dell Poweredge 350). I'm running ipfw2 rules on the bridge, but have ruled them out as the cause of the loss by clearing them out - the loss still occu

Re: Bridging Packet Loss

2003-10-24 Thread Tim Wilde
On Fri, 24 Oct 2003, Tim Wilde wrote: > I'm experiencing 2-3% packet loss in a bridging configuration on a FreeBSD > 4.8-p13 box, Intel Celeron 700MHz with 256MB RAM, dual fxp NICs (it's a > Dell Poweredge 350). Okay, ignore this - my switch was being stupid. Locked on both ends, packet loss. A

Re: Re: IPFW rules being weird?

2003-10-24 Thread dan
Hi there. Thank you for your reply! This is all very confusing, hehe! I'm not running a DNS server, the laptop which access through NAT I've set the nameservers as those of my ISP (and those listed in /etc/resolv.conf) of the FreeBSD box. Is there anything to particulary think should not be the