[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

ppp route troubles?



Hi!
Again some ppp-related trouble (i think:-)
Since i upgraded my machines to OpenBSD 3.0, i'm unable to
access certain sites. Below is an example trying to connect
www.securityfocus.com. This happens in every browser i try:
Konqueror with/without cookies, netscape, opera, mozilla,
lynx, w3m.
I always seem to get the first packet,
then the connection hangs there forever. Setting all routes/hosts to
mtu = 1492 doesn't help. Below is my configuration as well as some
tcpdumps from the invovled machines. These are:

Surfing Host			Router 			Internet
chef.rechners.hier		obsd.rechners.hier	tun0
192.168.10.4			192.168.10.3		62.214.33.39

The Fin-Packet in the tcpdump-outputs is from me hitting the
stop-button on Konqueror :)
Am i missing something obvious?
Thanks in advance.

Alf

--*--* ROUTER *--*--*

Connection: ADSL via ppp -auto pppoe
ppp.conf :
default:
 set log Phase Chat LCP IPCP CCP tun command
 nat enable yes
 nat same_ports yes
 nat use_sockets yes
 set redial 15 28800
 set reconnect 15 28800
pppoe:
 set device "! /usr/sbin/pppoe -i ne0"
 disable acfcomp
 disable protocomp
 deny acfcomp
 set mru 1488
 set mtu 1488
 set speed sync
 enable lqr
 set lqrperiod 5
 set cd 5
 set dial
 set login
 set timeout 300
 set ifaddr 10.0.0.1/0 212.7.128.41/0
 set authname xxxxxxxxxxx
 set authkey xxxxxxxxxxx
 add default HISADDR
 enable dns

nat via pfctl -N /etc/nat.conf :
# cat /etc/nat.conf
nat on tun0 from 192.168.10.0/24 to any -> tun0
rdr on tun0 proto udp from any to any port 27960 -> 192.168.10.5 port 27960 
#Quake 3
#

pf:
pf.conf doesn't get in the way, most sites work, problem stays with pfctl -F 
rules.

netstat output from router (obsd / 192.168.10.3) :
# netstat -rn | head -n 15
Routing tables

Internet:
Destination        Gateway            Flags     Refs     Use    Mtu  Interface
default            62.214.32.1        UGS         1    15703   1492   tun0
62.214.32.1        62.214.33.39       UH          1        0   1492   tun0
127/8              127.0.0.1          UGRS        0        0  33224   lo0
127.0.0.1          127.0.0.1          UH          3      134  33224   lo0
192.168.10/24      link#1             UC          0        0   1500   rl0
192.168.10.2       link#1             UHL         3    21288   1500   rl0
192.168.10.3       127.0.0.1          UGHS        0       24  33224   lo0
192.168.10.4       0:0:21:fa:19:88    UHL         2     3721   1500   rl0
192.168.10.5       link#1             UHL         1    58922   1500   rl0
224/4              127.0.0.1          URS         0        0  33224   lo0


ifconfig inner interface (rl0) on router(obsd / 192.168.10.3) :

# ifconfig rl0
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        media: Ethernet none (none)
        inet 192.168.10.3 netmask 0xffffff00 broadcast 192.168.10.255
        inet6 fe80::2c0:26ff:fe10:1fd9%rl0 prefixlen 64 scopeid 0x1
#

ifconfig outer interface (ne0) on router (obsd / 192.168.10.3) :
# ifconfig ne0
ne0: flags=8863<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        media: Ethernet autoselect (10baseT)
        inet6 fe80::200:b4ff:feb4:baa5%ne0 prefixlen 64 scopeid 0x2
#

ifconfig tun0 on router (obsd  / 192.168.10.3):
tun0: flags=8011<UP,POINTOPOINT,MULTICAST> mtu 1492
        inet 62.214.33.39 --> 62.214.32.1 netmask 0xffffffff
#


--*--* SURFER *--*--*


netstat output from surfing host (chef / 192.168.10.4):
# netstat -rn | head -n 12
Routing tables

Internet:
Destination        Gateway            Flags     Refs     Use    Mtu  Interface
default            192.168.10.3       UGS         0     1685   1500   rl0
127/8              127.0.0.1          UGRS        0        0  33224   lo0
127.0.0.1          127.0.0.1          UH          3       24  33224   lo0
192.168.10/24      link#1             UC          0        0   1500   rl0
192.168.10.3       0:c0:26:10:1f:d9   UHL         3      389   1500   rl0
192.168.10.4       127.0.0.1          UGHS        0      905  33224   lo0
224/4              127.0.0.1          URS         0        0  33224   lo0

#

ifconfig only interface on surfing host (chef / 192.168.10.4) :
# ifconfig rl0
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        media: Ethernet none (none)
        inet 192.168.10.4 netmask 0xffffff00 broadcast 192.168.10.255
        inet6 fe80::200:21ff:fefa:1988%rl0 prefixlen 64 scopeid 0x1
#


--*--*  TCPDUMPS OF REQUEST *--*--*
Request via konqueror with cookies:accept all

tcpdump outside interface on router (obsd / 192.168.10.3):
# tcpdump  -e -n -i tun0 port www
# tcpdump  -e -n -i tun0 port www
tcpdump: listening on tun0
16:18:29.179890 192.168.10.4.44338 > 66.38.151.10.80: S 
111691018:111691018(0) win 16384 <mss 1460,nop,nop,sackOK,nop,wscale 
0,nop,nop,timestamp 400929946 0> (DF)
16:18:29.421788 66.38.151.10.80 > 192.168.10.4.44338: S 
2994547917:2994547917(0) ack 111691019 win 31944 <mss 1452,sackOK,timestamp 
352228630 400929946,nop,wscale 0> (DF)
16:18:29.425387 192.168.10.4.44338 > 66.38.151.10.80: . ack 1 win 17280 
<nop,nop,timestamp 400929947 352228630> (DF)
16:18:29.430152 192.168.10.4.44338 > 66.38.151.10.80: P 1:304(303) ack 1 win 
17280 <nop,nop,timestamp 400929947 352228630> (DF)
16:18:29.682878 66.38.151.10.80 > 192.168.10.4.44338: . ack 304 win 31944 
<nop,nop,timestamp 352228656 400929947> (DF)
16:18:29.909090 66.38.151.10.80 > 192.168.10.4.44338: P 1:311(310) ack 304 
win 31944 <nop,nop,timestamp 352228679 400929947> (DF)
16:18:29.919144 192.168.10.4.44338 > 66.38.151.10.80: . ack 311 win 17280 
<nop,nop,timestamp 400929948 352228679> (DF)
16:22:06.579572 192.168.10.4.44338 > 66.38.151.10.80: F 304:304(0) ack 311 
win 17280 <nop,nop,timestamp 400930381 352228679> (DF)
16:22:06.820899 66.38.151.10.80 > 192.168.10.4.44338: . ack 305 win 31944 
<nop,nop,timestamp 352250370 400930381> (DF)
^C
43 packets received by filter
0 packets dropped by kernel
#

tcpdump inside interface on router (obsd / 192.168.10.3):
# tcpdump -e -n -i rl0 port www
tcpdump: listening on rl0
16:18:29.178391 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 78: 192.168.10.4.44338 
> 66.38.151.10.80: S 111691018:111691018(0) win 16384 <mss 
1460,nop,nop,sackOK,nop,wscale 0,nop,nop,timestamp 400929946 0> (DF)
16:18:29.423421 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 74: 66.38.151.10.80 > 
192.168.10.4.44338: S 2994547917:2994547917(0) ack 111691019 win 31944 <mss 
1452,sackOK,timestamp 352228630 400929946,nop,wscale 0> (DF)
16:18:29.424009 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 66: 192.168.10.4.44338 
> 66.38.151.10.80: . ack 1 win 17280 <nop,nop,timestamp 400929947 352228630> 
(DF)
16:18:29.428732 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 369: 192.168.10.4.44338 
> 66.38.151.10.80: P 1:304(303) ack 1 win 17280 <nop,nop,timestamp 400929947 
352228630> (DF)
16:18:29.684513 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 66: 66.38.151.10.80 > 
192.168.10.4.44338: . ack 304 win 31944 <nop,nop,timestamp 352228656 
400929947> (DF)
16:18:29.910805 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 376: 66.38.151.10.80 > 
192.168.10.4.44338: P 1:311(310) ack 304 win 31944 <nop,nop,timestamp 
352228679 400929947> (DF)
16:18:29.917600 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 66: 192.168.10.4.44338 
> 66.38.151.10.80: . ack 311 win 17280 <nop,nop,timestamp 400929948 
352228679> (DF)
16:22:06.578294 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 66: 192.168.10.4.44338 
> 66.38.151.10.80: F 304:304(0) ack 311 win 17280 <nop,nop,timestamp 
400930381 352228679> (DF)
16:22:06.822534 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 66: 66.38.151.10.80 > 
192.168.10.4.44338: . ack 305 win 31944 <nop,nop,timestamp 352250370 
400930381>(DF)
^C
33 packets received by filter
0 packets dropped by kernel
#


tcpdump on only interface (chef / 192.168.10.4):
# tcpdump -e -n -i rl0 port www
tcpdump: listening on rl0
16:46:43.940451 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 78: 192.168.10.4.44338 
> 66.38.151.10.80: S 111691018:111691018(0) win 16384 <mss 
1460,nop,nop,sackOK,nop,wscale 0,nop,nop,timestamp 400929946 0> (DF)
16:46:44.186053 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 74: 66.38.151.10.80 > 
192.168.10.4.44338: S 2994547917:2994547917(0) ack 111691019 win 31944 <mss 
1452,sackOK,timestamp 352228630 400929946,nop,wscale 0> (DF)
16:46:44.186114 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 66: 192.168.10.4.44338 
> 66.38.151.10.80: . ack 1 win 17280 <nop,nop,timestamp 400929947 352228630> 
(DF)
16:46:44.190492 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 369: 192.168.10.4.44338 
> 66.38.151.10.80: P 1:304(303) ack 1 win 17280 <nop,nop,timestamp 400929947 
352228630> (DF)
16:46:44.447139 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 66: 66.38.151.10.80 > 
192.168.10.4.44338: . ack 304 win 31944 <nop,nop,timestamp 352228656 
400929947> (DF)16:46:44.673701 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 376: 
66.38.151.10.80 > 192.168.10.4.44338: P 1:311(310) ack 304 win 31944 
<nop,nop,timestamp 352228679 400929947> (DF)
16:46:44.679697 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 66: 192.168.10.4.44338 
> 66.38.151.10.80: . ack 311 win 17280 <nop,nop,timestamp 400929948 
352228679> (DF)16:50:21.348353 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 66: 
192.168.10.4.44338 > 66.38.151.10.80: F 304:304(0) ack 311 win 17280 
<nop,nop,timestamp 400930381 352228679> (DF)
16:50:21.593249 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 66: 66.38.151.10.80 > 
192.168.10.4.44338: . ack 305 win 31944 <nop,nop,timestamp 352250370 
400930381> (DF)^C
35 packets received by filter
0 packets dropped by kernel
#