Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 26 May 2000 18:22:13 +0300
From:      Ruslan Ermilov <ru@sunbay.com>
To:        Dirk GOUDERS <hank@et.bocholt.fh-gelsenkirchen.de>
Cc:        Glen Gross <ggross@symark.com>, freebsd-questions@freebsd.org
Subject:   Re: ping -R
Message-ID:  <20000526182213.A97836@sunbay.com>
In-Reply-To: <200005260828.KAA00484@musashi.et.bocholt.fh-ge.de>; from hank@et.bocholt.fh-gelsenkirchen.de on Fri, May 26, 2000 at 10:28:21AM %2B0200
References:  <20000526100253.D82793@sunbay.com> <200005260828.KAA00484@musashi.et.bocholt.fh-ge.de>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, May 26, 2000 at 10:28:21AM +0200, Dirk GOUDERS wrote:
> 
>  > You probably have your firewall blocking IP packets with record-route
>  > option, do not you?
> 
> I use a firewall, yes.
> But, even if I delete all rules except the default one 
> 
> 65535 allow ip from any to any
> 
> ``ping -R'' will not work.
> 
> Having read your remark I got ``ping -R'' working - but only after
> having removed any firewall options from my kernel configuration
> file. 
> 
> #
> # Firewall stuff
> #
> #options         IPFIREWALL                      # firewall
> #options         IPFIREWALL_VERBOSE              # print information about
> #options         "IPFIREWALL_VERBOSE_LIMIT=1"    # limit verbosity
> #options         IPFIREWALL_DEFAULT_TO_ACCEPT    # allow everything by default
> #options         IPFILTER                        # kernel ipfilter support
> #options         IPFILTER_LOG                    # ipfilter logging
> #options         IPDIVERT                        # divert sockets
> 
> The manual page says that ipfw will always discard IP fragments with
> fragment offset of one but that should not affect packets sent by
> ``ping -R'' - doesn't it?
> 
I do not know what kind of firewall your were using, ipfirewall(4) or ipf(4).
The ipfirewall(4) does not discard RR packets by default.  But I do not know
if this is also true for ipf(4).


Cheers,
-- 
Ruslan Ermilov		Oracle Developer/DBA,
ru@sunbay.com		Sunbay Software AG,
ru@FreeBSD.org		FreeBSD committer,
+380.652.512.251	Simferopol, Ukraine

http://www.FreeBSD.org	The Power To Serve
http://www.oracle.com	Enabling The Information Age


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000526182213.A97836>