[ previous ] [ next ] [ threads ]
 
 From:  tonemmaps at krehel dot com
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Possible clamping or MTU issue since 1.3b1
 Date:  Sat, 06 Jan 2007 05:28:11 -0600 
I've identified an issue that appeared in 1.3b1 for me.  The systems are both net4501 w 64 Mbyte.

The problem occurs when trying to connect to my NAT'd service (10.0.0.14) on the remote m0n0wall. 
I've tracked down the source of the issue to be the remote m0n0wall blocking me but this only
started happening since I've installed 1.3b1 and 1.3b2 on my local m0n0wall, remote m0n0wall version
doesn't matter.  The remote m0n0wall log follows:

Jan  6 04:42:56 m0n0wall ipmon[91]: 04:42:55.707654 sis0 @0:23 b 10.0.0.14,80 -> 63.162.153.23,27869
PR tcp len 20 40 -RF IN bad
Jan  6 04:43:04 m0n0wall ipmon[91]: 04:43:03.575348 sis0 @0:23 b 10.0.0.14,80 -> 63.162.153.23,27864
PR tcp len 20 40 -RF IN bad
Jan  6 04:43:46 m0n0wall ipmon[91]: 04:43:46.143008 9x sis1 @0:25 b 63.162.153.23 -> 61.167.20.21 PR
icmp len 20 56 icmp timxceed/reassem for 10.0.1.6,2396 - 10.0.1.6,2396 PR tcp len 20 1492 IN
Jan  6 04:43:47 m0n0wall ipmon[91]: 04:43:47.143240 10x sis1 @0:25 b 63.162.153.23 -> 61.167.20.21
PR icmp len 20 56 icmp timxceed/reassem for 10.0.1.6,2401 - 10.0.1.6,2401 PR tcp len 20 1492 IN
Jan  6 04:43:48 m0n0wall ipmon[91]: 04:43:48.143613 2x sis1 @0:25 b 63.162.153.23 -> 61.167.20.21 PR
icmp len 20 56 icmp timxceed/reassem for 10.0.1.6,2396 - 10.0.1.6,2396 PR tcp len 20 1492 IN
Jan  6 04:43:49 m0n0wall ipmon[91]: 04:43:49.142876 4x sis1 @0:25 b 63.162.153.23 -> 61.167.20.21 PR
icmp len 20 56 icmp timxceed/reassem for 10.0.1.6,2401 - 10.0.1.6,2401 PR tcp len 20 1492 IN
Jan  6 04:43:50 m0n0wall ipmon[91]: 04:43:50.143233 2x sis1 @0:25 b 63.162.153.23 -> 61.167.20.21 PR
icmp len 20 56 icmp timxceed/reassem for 10.0.1.6,2396 - 10.0.1.6,2396 PR tcp len 20 1492 IN
Jan  6 04:43:51 m0n0wall ipmon[91]: 04:43:51.142887 sis1 @0:25 b 63.162.153.23 -> 61.167.20.21 PR
icmp len 20 56 icmp timxceed/reassem for 10.0.1.6,2401 - 10.0.1.6,2401 PR tcp len 20 1492 IN
Jan  6 04:43:52 m0n0wall ipmon[91]: 04:43:52.143058 3x sis1 @0:25 b 63.162.153.23 -> 61.167.20.21 PR
icmp len 20 56 icmp timxceed/reassem for 10.0.1.6,2401 - 10.0.1.6,2401 PR tcp len 20 1492 IN
Jan  6 04:43:54 m0n0wall ipmon[91]: 04:43:54.142506 2x sis1 @0:25 b 63.162.153.23 -> 61.167.20.21 PR
icmp len 20 56 icmp timxceed/reassem for 10.0.1.6,2396 - 10.0.1.6,2396 PR tcp len 20 1492 IN

As soon as I downgrade my local m0n0wall to 1.23b1 the blocking doesn't occur and everything works
properly.

I can provide more information if necessary.