[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: 2.8 ipfilter traceroute broken?



On Mon, Dec 04, 2000 at 06:15:21PM +0100, Peter Hoelsken wrote:
> I just upgraded from OpenBSD 2.7 to 2.8 and it seems to me that a traceroute
> running through an Interface which does NAT is broken. If I do a tcpdump on
> the external interface I can see the icmp ttl exceeded packets coming in,
> however they don't get translated and forwarded towards the internal host.
> 
> Internal <--->fxp0 OpenBSD xl0<---> Internet

Can you post the tcpdumps on both interface while you are tracerouting
from one of your internal hosts ?

Also, you have enabled ip forwarding (ie routing) on the obsd box,
right ?

-- 
Rémi




Visit your host, monkey.org