Re: Transparent ISP proxy problem or PF problem

2005-12-12 Thread Alexander Iliev
Hi again, Steve. > With any potential MTU issue I always start with something like > "ping -vDs 1472 arenabg.com" from various hosts and routers. > As you vary the sizes you should receive either an echo-reply or a > packet-too-big (confirm with a packet sniffer). If you don't receive any > re

Re: Transparent ISP proxy problem or PF problem

2005-12-07 Thread Alexander Iliev
2005/12/7, Steve Welham <[EMAIL PROTECTED]>: > > I tried to connect the cable for the internet directly to one > > of the client machines behind the firewall (Debian GNU/Linux > > 3.1) and the site loads perfectly, so I came to the > > conclusion that my PF rules are blocking the packets. So, I > >

Re: Transparent ISP proxy problem or PF problem

2005-12-07 Thread Alexander Iliev
2005/12/7, Stuart Henderson <[EMAIL PROTECTED]>: > >> Your test with 'telnet' gives small enough packets that it probably > >> won't be affected by PMTU problems. > > > > The conclusion that my problem is not PMTU related did not come > > from the telnet test. From what I've read on this, I think t

Re: Transparent ISP proxy problem or PF problem

2005-12-07 Thread Alexander Iliev
2005/12/7, Stuart Henderson <[EMAIL PROTECTED]>: > --On 07 December 2005 12:33 +0200, Alexander Iliev wrote: > > > So far so good - the setup works very well with just one problem. My > > ISP passes the traffic for two certain sites through a transparent > > proxy. I

Transparent ISP proxy problem or PF problem

2005-12-07 Thread Alexander Iliev
how to proceed from here in order to diagnose the problem. Again, I don't claim this to be OpenBSD problem or bug, although I tried to boot Freesco on the router machine and the problem site (arenabg.com) did load. Thanks in advance. Best regards, Alexander Iliev configurations follow: