|
||||||||||
Err, actually, I just noticed I still had to "Apply changes" and it was working, so maybe it was the WAN. On 6/17/07, Albert Lash <albert dot lash at gmail dot com> wrote: > > Fixed it. I turned on "allow fragmented packets" all all lan firewall > rules (not sure if that was needed), but also on the wan and opt1 firewall > rules (which essentially open the bridge entirely, I just use it for > bandwidth management). > > Specifically, the problem kept occurring until I enabled it on the OPT1 > firewall rule (which is bridged to the WAN). > > Thanks, hope this helps someone else. > > On 6/16/07, Albert Lash <albert dot lash at gmail dot com> wrote: > > > > Now that I'm thinking more about it, I've seen something like this > > before on my Buffalo Airstation running openwrt. Seems like it runs out of > > memory. Maybe the Soekris net4501 running in bridge mode runs out of memory > > when there is a fast output of data? > > > > On 6/16/07, Albert Lash < albert dot lash at gmail dot com> wrote: > > > > > > Sorry I didn't reply back to the list before. To reiterate, I'm using > > > cable on both sides, not adsl. > > > > > > I noticed that the ifconfig was dying when it should output the ipv6 > > > address, so I blacklisted the ipv6 modules, restarted, still no luck. > > > > > > On 6/16/07, Alex Neuman < alex at nkpanama dot com> wrote: > > > > > > > > The only time I've seen this is when there is an MTU problem, which > > > > seem > > > > to coincide with the use of ADSL links. > > > > > > > > Try lowering the MTU to 1400 in every device, one by one, starting > > > > from > > > > your computer outwards up to the device you're trying to access. If > > > > this > > > > doesn't work, let us know. > > > > > > > > > > > > > Hello, > > > > > > > > > > I'm loving m0n0wall, nice work! I'm using a soekris net4501 as a > > > > filtered > > > > > bridge to manage bandwidth for a diverse network. I have a /28 > > > > subnet of > > > > > public ips that I'm passing through the net4501 from wan to opt1 > > > > to a > > > > > switch > > > > > connecting: > > > > > > > > > > * Astlinux (though soon to be askoziaPBX) on WRAP > > > > > * m0n0wall on a WRAP acting as a NAT and router for our office lan > > > > > > > > > * a couple of public servers > > > > > > > > > > This allows our lan computers to access the public servers, which > > > > you > > > > > can't > > > > > do when using 1:1 or server NAT AFAIK. > > > > > > > > > > Everything is working well, and I have the inner m0n0wall (the one > > > > on the > > > > > WRAP behind the filtered bridge) connecting a VPN out to another > > > > network. > > > > > That still works fine, except I'm noticing some very odd behavior. > > > > If I > > > > > ssh > > > > > over the VPN to a a device on the remove lan and run one of the > > > > following > > > > > commands: > > > > > > > > > > * ifconfig > > > > > * ps -A > > > > > > > > > > something goes haywire and the shell is dropped. The process > > > > doesn't die, > > > > > as > > > > > I can login through the public ip and watch the top of my user and > > > > see > > > > > sshd > > > > > and bash continue to run after the screen buffer in the other > > > > shell > > > > > through > > > > > the vpn stops responding. > > > > > > > > > > I'm wondering if I'm doing something that goes against good > > > > network design > > > > > here, or if this is a sign of something that is mis-configured and > > > > needs > > > > > to > > > > > be fixed. I appreciate any advice - thanks! > > > > > > > > > > Al > > > > > > > > > > -- > > > > > My Blogs: > > > > > http://www.docunext.com/ > > > > > http://www.albertlash.com/ > > > > > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > > > > > > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch > > > > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch > > > > > > > > > > > > > > > > > -- > > > My Blogs: > > > http://www.docunext.com/ > > > http://www.albertlash.com/ > > > > > > > > > > > -- > > My Blogs: > > http://www.docunext.com/ > > http://www.albertlash.com/ > > > > > > -- > My Blogs: > http://www.docunext.com/ > http://www.albertlash.com/ > -- My Blogs: http://www.docunext.com/ http://www.albertlash.com/ |