Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 26 May 2000 10:28:21 +0200
From:      Dirk GOUDERS <hank@et.bocholt.fh-gelsenkirchen.de>
To:        Ruslan Ermilov <ru@sunbay.com>, Glen Gross <ggross@symark.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: ping -R 
Message-ID:  <200005260828.KAA00484@musashi.et.bocholt.fh-ge.de>
In-Reply-To: Your message of "Fri, 26 May 2000 10:02:53 %2B0300." <20000526100253.D82793@sunbay.com> 

next in thread | previous in thread | raw e-mail | index | archive | help

 > You probably have your firewall blocking IP packets with record-route
 > option, do not you?

I use a firewall, yes.
But, even if I delete all rules except the default one 

65535 allow ip from any to any

``ping -R'' will not work.

Having read your remark I got ``ping -R'' working - but only after
having removed any firewall options from my kernel configuration
file. 

#
# Firewall stuff
#
#options         IPFIREWALL                      # firewall
#options         IPFIREWALL_VERBOSE              # print information about
#options         "IPFIREWALL_VERBOSE_LIMIT=1"    # limit verbosity
#options         IPFIREWALL_DEFAULT_TO_ACCEPT    # allow everything by default
#options         IPFILTER                        # kernel ipfilter support
#options         IPFILTER_LOG                    # ipfilter logging
#options         IPDIVERT                        # divert sockets

The manual page says that ipfw will always discard IP fragments with
fragment offset of one but that should not affect packets sent by
``ping -R'' - doesn't it?

Dirk


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200005260828.KAA00484>