Date: Thu, 5 Feb 2004 22:06:50 +0200 From: Dancho Penev <dpenev@mnet.bg> To: Alexander Botov <alexb@mail.bg> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: forwarding with ttl=1 Message-ID: <20040205200650.GD630@earth.dpsca.bg> In-Reply-To: <004f01c3ebea$5974d750$0200a8c0@ALIENX> References: <004f01c3ebea$5974d750$0200a8c0@ALIENX>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Feb 05, 2004 at 03:17:04PM +0200, Alexander Botov wrote: >From: "Alexander Botov" <alexb@mail.bg> >To: <freebsd-questions@freebsd.org> >Date: Thu, 5 Feb 2004 15:17:04 +0200 >Subject: forwarding with ttl=1 > >Hi All > >I am newbie with configuring networks under FreeBSD . I have small network with gateway running on FreeBSD 5.2 Release .My ISP offers me pppoe service for connecting to Internet . I didn't have problems with configuring ppp with pppoe . I used nat option wchich works fine for masquerading the local network from the world . The problem is that the ISP's gateway returns every time packets with ttl=1 which makes further forwarding impossible . My gateway returns icmp error mesage "time exceeded" and discards packets . I want to know if I made some mistake with configuring nat service or if not what is the solution of the problem ? Is there any service that can increment ttl and process the packet ? I tried to avoid the checking of ttl in the ip_forward() function in ip_input.c and skipping the decrement of ttl and everything works fine but i think that this is very ugly kernel hack . Probably there is an easy and elegant solution . Any ideas ? You don't need to hack the kernel because this was already did. Add options IPSTEALTH in your kernel configuration file, build the new kernel and set net.inet.ip.ipstealt sysctl variable to 1. For more information see /usr/src/sys/conf/NOTES and /usr/src/sys/netinet/ip_input.c. > >please excuse my English >_______________________________________________ >freebsd-questions@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-questions >To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" -- Dancho Penev
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040205200650.GD630>