Hello,

I did a bit more testing.

Monowall 1.1 responds OK to pings. 1.2B3 works OK but every beta after drops 
fragmented ping packets. I haven't yet tested to see if UDP packets are 
affected.

The problem does seem to be with IPFilter. I disabled IPF from the exec.php 
page and was able to ping the monowall with large packets again.

I took a quick look at pfsense and that doesn't seem to drop packets, 
although I don't think it uses IPF?

Kris.

----- Original Message ----- 
From: "Chris Buechler" <cbuechler at gmail dot com>
Cc: <m0n0wall at lists dot m0n0 dot ch>
Sent: Thursday, September 08, 2005 12:34 AM
Subject: Re: [m0n0wall] Monowall 1.2B9 ICMP


On 9/6/05, Kristian Shaw <monowall at wealdclose dot co dot uk> wrote:
> Hello,
>
> I have noticed some odd behaviour with ICMP and 1.2B9 that I don't fully 
> understand. It seems that the handling of fragmented ICMP packets (in 
> particular I've been testing pings) is inconsistent.
>

I've confirmed this as an issue (or at least I can replicate it) and
emailed Manuel with a lot more details.  So it's being looked at, at
least.

-Chris

---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch