Re: [m0n0wall] Fragmentation issue

From:	Manuel Kasper <mk at neon1 dot net>
To:	Eric Boudrand <eric at boudrand dot net>
Cc:	m0n0wall at lists dot m0n0 dot ch
Subject:	Re: [m0n0wall] Fragmentation issue
Date:	Fri, 3 Oct 2008 13:47:59 +0200

On Oct 3, 2008, at 12:35 PM, Eric Boudrand wrote:

> After the soekris box, I cannot find packet 2. Packet 1 is the same,  
> but
> with the new computer lan IP address. I can find also packet 3. So
> packet 2 was dropped by m0n0wall. I can send the wireshark capture to
> the people interested.

Have you checked the "Allow fragmented packets" option in the relevant  
firewall rules? It's off by default...

- Manuel