Re: PF keep state does'nt like Mandriva2007

2007-05-17 Thread Brian A. Seklecki
Could be sliding windows, selective ack (SACK), MTU/MTU Disc/MSS issues, any of the RFC extensions. Check sysctl on linux v.s. scrub on OpenBSD ~BAS On Mon, 29 Jan 2007, Marco Peereboom wrote: Nobody likes Mandriva. On Sun, Jan 28, 2007 at 07:56:04PM -0800, Reza Muhammad wrote: Dear Lists.

Re: PF keep state does'nt like Mandriva2007

2007-01-29 Thread Marco Peereboom
Nobody likes Mandriva. On Sun, Jan 28, 2007 at 07:56:04PM -0800, Reza Muhammad wrote: > Dear Lists. > > I have one bridge PF machine for packet queue and > prio, > and few new install Mandriva2007 (linux kernel) that > couldn not browse the web (the other protocol work OK) > if the rules keep st

Re: PF keep state does'nt like Mandriva2007

2007-01-29 Thread Stuart Henderson
> > > and few new install Mandriva2007 (linux kernel) that > > > couldn not browse the web (the other protocol work OK) > > > if the rules keep state in PF machine is activated. > > > > use 'flags S/SA keep state' > > > thanks for nice replay.. but it still doesnt work. > I believe that problem

Re: PF keep state does'nt like Mandriva2007

2007-01-29 Thread Reza Muhammad
--- Stuart Henderson <[EMAIL PROTECTED]> wrote: > On 2007/01/28 19:56, Reza Muhammad wrote: > > and few new install Mandriva2007 (linux kernel) > that > > couldn not browse the web (the other protocol work > OK) > > if the rules keep state in PF machine is > activated. > > use 'flags S/SA keep s

Re: PF keep state does'nt like Mandriva2007

2007-01-29 Thread Stuart Henderson
On 2007/01/28 19:56, Reza Muhammad wrote: > and few new install Mandriva2007 (linux kernel) that > couldn not browse the web (the other protocol work OK) > if the rules keep state in PF machine is activated. use 'flags S/SA keep state'

Re: PF keep state does'nt like Mandriva2007

2007-01-28 Thread Bryan Irvine
On 1/28/07, Reza Muhammad <[EMAIL PROTECTED]> wrote: > > > Why PF (OpenBSD-3.9) doesnt like Mandriva2007 > Plese help because you have Mandriva configured wrong.