Date: Sun, 17 Jun 2007 14:37:10 +0100 From: RW <fbsd06@mlists.homeunix.com> To: freebsd-questions@freebsd.org Subject: Re: pf(4) + fetch(1) + http://ftp.gnu.org Message-ID: <20070617143710.209c094c@gumby.homeunix.com.> In-Reply-To: <4674A131.4050200@gmail.com> References: <da7069940706141336y25371e4cq5769beb2fa5208e3@mail.gmail.com> <4674A131.4050200@gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 17 Jun 2007 04:49:21 +0200 Sten Daniel Soersdal <netslists@gmail.com> wrote: > My guess is, your path-mtu is lower at some point between you and > ftp.gnu.org which (may or may not) result in an icmp packet > indicating that the packet was dropped as fragmentation was needed > but DF flag was set. Vlad replied to me privately, and it seems that removing modulate fixed it. Modulate turns on tcp-proxying, which allows pf to rewrite initial sequence numbers, and I guess there's a problem somewhere in that code. It does seem to be site or route specific though.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070617143710.209c094c>