From owner-freebsd-questions@FreeBSD.ORG  Sun Aug 26 07:43:59 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id EEE7916A418
	for <freebsd-questions@freebsd.org>;
	Sun, 26 Aug 2007 07:43:59 +0000 (UTC)
	(envelope-from mich.admin@mail.ru)
Received: from mx27.mail.ru (mx27.mail.ru [194.67.23.64])
	by mx1.freebsd.org (Postfix) with ESMTP id B78CC13C45D
	for <freebsd-questions@freebsd.org>;
	Sun, 26 Aug 2007 07:43:59 +0000 (UTC)
	(envelope-from mich.admin@mail.ru)
Received: from [91.122.47.16] (port=5671 helo=[10.232.232.2])
	by mx27.mail.ru with esmtp id 1IPCmr-000LFU-00
	for freebsd-questions@freebsd.org; Sun, 26 Aug 2007 11:43:58 +0400
Message-ID: <46D12F40.5060500@mail.ru>
Date: Sun, 26 Aug 2007 11:44:00 +0400
From: MIZ0 <mich.admin@mail.ru>
User-Agent: Thunderbird 2.0.0.0 (Windows/20070326)
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: TCP packets don't flow from external hosts to WinVista clients
 behind
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 26 Aug 2007 07:44:00 -0000

 > Could be TCP window scaling. See
 > http://en.wikipedia.org/wiki/TCP_window_scale_option
 > Or the plain old PMTUD problem described in
 > 
http://www.cisco.com/en/US/tech/tk870/tk877/tk880/technologies_tech_note09186a008011a218.shtml#backinfo
 >
 > =Adriaan=

Nothing helps.
I've tried to change client's mtu, even shrinked packets with ng_tcpmss 
- no effect.
I don't understand why freebsd machines from internal network can't 
establish  any TCP connection to external net too.
Can ipfw or netgraph detect client's OS type and allow only Windows XP ? =))