Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Sep 2004 03:55:53 -0000
From:      "Florian C. Smeets" <flo@kasimir.com>
To:        pf4freebsd@freelists.org
Subject:   [pf4freebsd] Re: nfsd send error 1 probably caused by pf ?
Message-ID:  <3FB2B203.1030704@kasimir.com>
In-Reply-To: <20031112220709.GO17343@insomnia.benzedrine.cx>
References:  <3FB2ACA6.7030302@kasimir.com> <20031112220709.GO17343@insomnia.benzedrine.cx>

next in thread | previous in thread | raw e-mail | index | archive | help
Daniel Hartmeier wrote:
> On Wed, Nov 12, 2003 at 10:56:54PM +0100, Florian C. Smeets wrote:
>=20
>=20
>>Nov 12 19:38:57 bender kernel: nfsd send error 1
>=20
>=20
> Are you using nfs over udp or tcp?
>=20
It's tcp.
> If you are using scrub, try adding 'no-df' to all scrub rules. Some nfs
> implementations (Linux and Solaris, mostly) use fragments with DF set,
> which get dropped by scrub unless you use no-df.

I'm only using scrub on the external interface not on the internal one=20
where the nfs is transferred.

>=20
> If that doesn't solve it, add 'log' to all block rules and watch pflog
> for blocked packets. Enable debug logging (pfctl -xm) and watch
> /var/log/messages for pf related messages. Do you see fragment
> reassembly there?

I don't have any block rules on the internal interface ?!

>=20
> Daniel
>=20

I'm going to experiment a little further and see if i can find anything.

Thanks,
flo






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3FB2B203.1030704>