Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Sep 2004 03:55:48 -0000
From:      Daniel Hartmeier <daniel@benzedrine.cx>
To:        pf4freebsd@freelists.org
Subject:   [pf4freebsd] Re: nfsd send error 1 probably caused by pf ?
Message-ID:  <20031112220709.GO17343@insomnia.benzedrine.cx>
In-Reply-To: <3FB2ACA6.7030302@kasimir.com>
References:  <3FB2ACA6.7030302@kasimir.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Nov 12, 2003 at 10:56:54PM +0100, Florian C. Smeets wrote:

> Nov 12 19:38:57 bender kernel: nfsd send error 1

Are you using nfs over udp or tcp?

If you are using scrub, try adding 'no-df' to all scrub rules. Some nfs
implementations (Linux and Solaris, mostly) use fragments with DF set,
which get dropped by scrub unless you use no-df.

If that doesn't solve it, add 'log' to all block rules and watch pflog
for blocked packets. Enable debug logging (pfctl -xm) and watch
/var/log/messages for pf related messages. Do you see fragment
reassembly there?

Daniel




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031112220709.GO17343>