Re: Can't browse to Microsoft web sites...

2008-05-20 Thread Jeff Ross
Stuart Henderson wrote: On 2008-05-20, Daniel Melameth <[EMAIL PROTECTED]> wrote: Might be an MTU issue. Probably. Microsoft block *all* ICMP at their border. (you at the back of the classroom, stop sniggering.. :-) "scrub max-mss" should work around it, or [EMAIL PROTECTED] may be able to ge

Re: Can't browse to Microsoft web sites...

2008-05-20 Thread Stuart Henderson
On 2008-05-20, Daniel Melameth <[EMAIL PROTECTED]> wrote: > Might be an MTU issue. Probably. Microsoft block *all* ICMP at their border. (you at the back of the classroom, stop sniggering.. :-) "scrub max-mss" should work around it, or [EMAIL PROTECTED] may be able to get in touch with the admin

Re: Can't browse to Microsoft web sites...

2008-05-20 Thread Jeff Ross
Jeff Ross wrote: I know, "Who cares?" or "Great!" is my own response but my users have other wishes that include msn.com and this one has me stumped. I had a more complex pf rule set but now I'm using a simple rule set based almost entirely on the one from the PF FAQ: ext_if="em0" # Extern

Re: Can't browse to Microsoft web sites...

2008-05-20 Thread Marti Martinez
On Tue, May 20, 2008 at 10:31 AM, Jeff Ross <[EMAIL PROTECTED]> wrote: > I think I smell hot tar, and I just saw a couple of naked chickens run past > the window... For some reason I kept reading that as "naked chicks"...and while a nice metal image, it wasn't fitting in well with the rest of the

Re: Can't browse to Microsoft web sites...

2008-05-20 Thread Daniel Melameth
Might be an MTU issue. Try tcpdumping an interface other than pflog0. On Tue, May 20, 2008 at 10:15 AM, Jeff Ross <[EMAIL PROTECTED]> wrote: > I had a more complex pf rule set but now I'm using a simple rule set based > almost entirely on the one from the PF FAQ: > > ext_if="em0" # External Publ

Re: Can't browse to Microsoft web sites...

2008-05-20 Thread Jeff Ross
On Tue, 20 May 2008, Jay Hart wrote: Maybe we could create a fake blog site stating that MSN.COM is offline until the M$Soft-Yahoo deal is completed. Would that help you out. Jay I think I smell hot tar, and I just saw a couple of naked chickens run past the window... Jeff I know, "Who

Re: Can't browse to Microsoft web sites...

2008-05-20 Thread Jay Hart
Maybe we could create a fake blog site stating that MSN.COM is offline until the M$Soft-Yahoo deal is completed. Would that help you out. Jay > I know, "Who cares?" or "Great!" is my own response but my users have > other wishes that include msn.com and this one has me stumped. > > I had a more

Can't browse to Microsoft web sites...

2008-05-20 Thread Jeff Ross
I know, "Who cares?" or "Great!" is my own response but my users have other wishes that include msn.com and this one has me stumped. I had a more complex pf rule set but now I'm using a simple rule set based almost entirely on the one from the PF FAQ: ext_if="em0" # External Public Interfac