[ previous ] [ next ] [ threads ]
 From:  =?ISO-8859-1?Q?Michael_=D8stergaard_Pedersen?= <michael at bytopia dot dk>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] Possible bug: LAN redirection via static route
 Date:  Tue, 18 May 2004 01:29:19 +0200
I have looked closer at the SSH connection between the two hosts. Maybe this 
will give you some more insight as to where the problem is.

Let -M-> indicate traffic being sent through the m0n0wall (and of course 
also the second router later)
Let -O-> indicate traffic being sent through the router 
(without touching the m0n0wall)

So it looks like this

                /        \
               M          M
              /            \    <-O->  ---

ICMP redirects have been sent so my host SHOULD not contact the m0n0wall at 
all. It still does for some strange reason, but that is not the issue here. 
Here is a detailed explaination of what happens:

1. [SYN]     -M->
2.    [SYN,ACK] -O->
3. [ACK]     -O->
4.    [PSH,ACK] -O->
Normal communication here back and forth. No traffic touches the m0n0wall
30.    [PSH,ACK] -O->
31. [PSH,ACK] -M->

Packet number 31 is dropped by the m0n0wall and the connection hangs.

Could the problem be that the m0n0wall has received a SYN packet for a 
connection from, but never an ACK from The next 
packet it sees for that connection is from again, but that 
connection has not been established since from the m0n0walls point of view 
it is still waiting for the ACK from before the connection is