Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 19 Dec 2007 17:43:58 +0300
From:      Eygene Ryabinkin <rea-fbsd@codelabs.ru>
To:        vermaden <vermaden@interia.pl>
Cc:        freebsd-net@freebsd.org
Subject:   Re: default route
Message-ID:  <+4G9Nr+ZwtUziff5Dar2/aUcj4w@JA8cQVXg905K+QGregQphbHxLjw>
In-Reply-To: <20071218172055.D14CC160055@f32.poczta.interia.pl>
References:  <20071218172055.D14CC160055@f32.poczta.interia.pl>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
Tue, Dec 18, 2007 at 06:20:53PM +0100, vermaden wrote:
> > After reading this I feel that you have absolutely no packets on
> > either interfaces when your Linux box ping FreeBSD.  But this
> > contradicts with your previous assertion that if ICMP packet comes
> > in on rl1, then it is reflected at rl0.  Am I missing something?
> 
> Yes I must mislook that, rl0 also is 'dead' while Linux box pings
> my FreeBSD box using net on rl1.

OK, so I feel that there are two points to check.

1. Firewall.  Even if you're running GENERIC, firewall thingies
   are compiled as kernel modules and can be loaded by the startup
   scripts.  The output of 'kldstat -v' will show what modules
   are loaded.  BPF is run before filtering, so it sees packets
   that firewall can drop.

2. Enable ICMP verbose mode in the kernel: set the variable
   'icmpprintfs' on the top of the /sys/netinet/ip_icmp.c
   to 1 and define ICMPPRINTFS during kernel compilation via
   'makeoptions ICMPPRINTFS=1'.  After this you should watch for
   kernel messages with the 'icmp' at the beginning of the line.

Hope this helps.
-- 
Eygene



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?+4G9Nr+ZwtUziff5Dar2/aUcj4w>