[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
ppp route troubles?
- To: misc_(_at_)_openbsd_(_dot_)_org
- Subject: ppp route troubles?
- From: experte <leopold-bloom_(_at_)_foni_(_dot_)_net>
- Date: Mon, 17 Dec 2001 16:56:46 +0000
Hi!
Again some ppp-related trouble (i think:-)
Since i upgraded my machines to OpenBSD 3.0, i'm unable to
access certain sites. Below is an example trying to connect
www.securityfocus.com. This happens in every browser i try:
Konqueror with/without cookies, netscape, opera, mozilla,
lynx, w3m.
I always seem to get the first packet,
then the connection hangs there forever. Setting all routes/hosts to
mtu = 1492 doesn't help. Below is my configuration as well as some
tcpdumps from the invovled machines. These are:
Surfing Host Router Internet
chef.rechners.hier obsd.rechners.hier tun0
192.168.10.4 192.168.10.3 62.214.33.39
The Fin-Packet in the tcpdump-outputs is from me hitting the
stop-button on Konqueror :)
Am i missing something obvious?
Thanks in advance.
Alf
--*--* ROUTER *--*--*
Connection: ADSL via ppp -auto pppoe
ppp.conf :
default:
set log Phase Chat LCP IPCP CCP tun command
nat enable yes
nat same_ports yes
nat use_sockets yes
set redial 15 28800
set reconnect 15 28800
pppoe:
set device "! /usr/sbin/pppoe -i ne0"
disable acfcomp
disable protocomp
deny acfcomp
set mru 1488
set mtu 1488
set speed sync
enable lqr
set lqrperiod 5
set cd 5
set dial
set login
set timeout 300
set ifaddr 10.0.0.1/0 212.7.128.41/0
set authname xxxxxxxxxxx
set authkey xxxxxxxxxxx
add default HISADDR
enable dns
nat via pfctl -N /etc/nat.conf :
# cat /etc/nat.conf
nat on tun0 from 192.168.10.0/24 to any -> tun0
rdr on tun0 proto udp from any to any port 27960 -> 192.168.10.5 port 27960
#Quake 3
#
pf:
pf.conf doesn't get in the way, most sites work, problem stays with pfctl -F
rules.
netstat output from router (obsd / 192.168.10.3) :
# netstat -rn | head -n 15
Routing tables
Internet:
Destination Gateway Flags Refs Use Mtu Interface
default 62.214.32.1 UGS 1 15703 1492 tun0
62.214.32.1 62.214.33.39 UH 1 0 1492 tun0
127/8 127.0.0.1 UGRS 0 0 33224 lo0
127.0.0.1 127.0.0.1 UH 3 134 33224 lo0
192.168.10/24 link#1 UC 0 0 1500 rl0
192.168.10.2 link#1 UHL 3 21288 1500 rl0
192.168.10.3 127.0.0.1 UGHS 0 24 33224 lo0
192.168.10.4 0:0:21:fa:19:88 UHL 2 3721 1500 rl0
192.168.10.5 link#1 UHL 1 58922 1500 rl0
224/4 127.0.0.1 URS 0 0 33224 lo0
ifconfig inner interface (rl0) on router(obsd / 192.168.10.3) :
# ifconfig rl0
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
media: Ethernet none (none)
inet 192.168.10.3 netmask 0xffffff00 broadcast 192.168.10.255
inet6 fe80::2c0:26ff:fe10:1fd9%rl0 prefixlen 64 scopeid 0x1
#
ifconfig outer interface (ne0) on router (obsd / 192.168.10.3) :
# ifconfig ne0
ne0: flags=8863<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST> mtu 1500
media: Ethernet autoselect (10baseT)
inet6 fe80::200:b4ff:feb4:baa5%ne0 prefixlen 64 scopeid 0x2
#
ifconfig tun0 on router (obsd / 192.168.10.3):
tun0: flags=8011<UP,POINTOPOINT,MULTICAST> mtu 1492
inet 62.214.33.39 --> 62.214.32.1 netmask 0xffffffff
#
--*--* SURFER *--*--*
netstat output from surfing host (chef / 192.168.10.4):
# netstat -rn | head -n 12
Routing tables
Internet:
Destination Gateway Flags Refs Use Mtu Interface
default 192.168.10.3 UGS 0 1685 1500 rl0
127/8 127.0.0.1 UGRS 0 0 33224 lo0
127.0.0.1 127.0.0.1 UH 3 24 33224 lo0
192.168.10/24 link#1 UC 0 0 1500 rl0
192.168.10.3 0:c0:26:10:1f:d9 UHL 3 389 1500 rl0
192.168.10.4 127.0.0.1 UGHS 0 905 33224 lo0
224/4 127.0.0.1 URS 0 0 33224 lo0
#
ifconfig only interface on surfing host (chef / 192.168.10.4) :
# ifconfig rl0
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
media: Ethernet none (none)
inet 192.168.10.4 netmask 0xffffff00 broadcast 192.168.10.255
inet6 fe80::200:21ff:fefa:1988%rl0 prefixlen 64 scopeid 0x1
#
--*--* TCPDUMPS OF REQUEST *--*--*
Request via konqueror with cookies:accept all
tcpdump outside interface on router (obsd / 192.168.10.3):
# tcpdump -e -n -i tun0 port www
# tcpdump -e -n -i tun0 port www
tcpdump: listening on tun0
16:18:29.179890 192.168.10.4.44338 > 66.38.151.10.80: S
111691018:111691018(0) win 16384 <mss 1460,nop,nop,sackOK,nop,wscale
0,nop,nop,timestamp 400929946 0> (DF)
16:18:29.421788 66.38.151.10.80 > 192.168.10.4.44338: S
2994547917:2994547917(0) ack 111691019 win 31944 <mss 1452,sackOK,timestamp
352228630 400929946,nop,wscale 0> (DF)
16:18:29.425387 192.168.10.4.44338 > 66.38.151.10.80: . ack 1 win 17280
<nop,nop,timestamp 400929947 352228630> (DF)
16:18:29.430152 192.168.10.4.44338 > 66.38.151.10.80: P 1:304(303) ack 1 win
17280 <nop,nop,timestamp 400929947 352228630> (DF)
16:18:29.682878 66.38.151.10.80 > 192.168.10.4.44338: . ack 304 win 31944
<nop,nop,timestamp 352228656 400929947> (DF)
16:18:29.909090 66.38.151.10.80 > 192.168.10.4.44338: P 1:311(310) ack 304
win 31944 <nop,nop,timestamp 352228679 400929947> (DF)
16:18:29.919144 192.168.10.4.44338 > 66.38.151.10.80: . ack 311 win 17280
<nop,nop,timestamp 400929948 352228679> (DF)
16:22:06.579572 192.168.10.4.44338 > 66.38.151.10.80: F 304:304(0) ack 311
win 17280 <nop,nop,timestamp 400930381 352228679> (DF)
16:22:06.820899 66.38.151.10.80 > 192.168.10.4.44338: . ack 305 win 31944
<nop,nop,timestamp 352250370 400930381> (DF)
^C
43 packets received by filter
0 packets dropped by kernel
#
tcpdump inside interface on router (obsd / 192.168.10.3):
# tcpdump -e -n -i rl0 port www
tcpdump: listening on rl0
16:18:29.178391 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 78: 192.168.10.4.44338
> 66.38.151.10.80: S 111691018:111691018(0) win 16384 <mss
1460,nop,nop,sackOK,nop,wscale 0,nop,nop,timestamp 400929946 0> (DF)
16:18:29.423421 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 74: 66.38.151.10.80 >
192.168.10.4.44338: S 2994547917:2994547917(0) ack 111691019 win 31944 <mss
1452,sackOK,timestamp 352228630 400929946,nop,wscale 0> (DF)
16:18:29.424009 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 66: 192.168.10.4.44338
> 66.38.151.10.80: . ack 1 win 17280 <nop,nop,timestamp 400929947 352228630>
(DF)
16:18:29.428732 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 369: 192.168.10.4.44338
> 66.38.151.10.80: P 1:304(303) ack 1 win 17280 <nop,nop,timestamp 400929947
352228630> (DF)
16:18:29.684513 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 66: 66.38.151.10.80 >
192.168.10.4.44338: . ack 304 win 31944 <nop,nop,timestamp 352228656
400929947> (DF)
16:18:29.910805 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 376: 66.38.151.10.80 >
192.168.10.4.44338: P 1:311(310) ack 304 win 31944 <nop,nop,timestamp
352228679 400929947> (DF)
16:18:29.917600 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 66: 192.168.10.4.44338
> 66.38.151.10.80: . ack 311 win 17280 <nop,nop,timestamp 400929948
352228679> (DF)
16:22:06.578294 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 66: 192.168.10.4.44338
> 66.38.151.10.80: F 304:304(0) ack 311 win 17280 <nop,nop,timestamp
400930381 352228679> (DF)
16:22:06.822534 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 66: 66.38.151.10.80 >
192.168.10.4.44338: . ack 305 win 31944 <nop,nop,timestamp 352250370
400930381>(DF)
^C
33 packets received by filter
0 packets dropped by kernel
#
tcpdump on only interface (chef / 192.168.10.4):
# tcpdump -e -n -i rl0 port www
tcpdump: listening on rl0
16:46:43.940451 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 78: 192.168.10.4.44338
> 66.38.151.10.80: S 111691018:111691018(0) win 16384 <mss
1460,nop,nop,sackOK,nop,wscale 0,nop,nop,timestamp 400929946 0> (DF)
16:46:44.186053 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 74: 66.38.151.10.80 >
192.168.10.4.44338: S 2994547917:2994547917(0) ack 111691019 win 31944 <mss
1452,sackOK,timestamp 352228630 400929946,nop,wscale 0> (DF)
16:46:44.186114 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 66: 192.168.10.4.44338
> 66.38.151.10.80: . ack 1 win 17280 <nop,nop,timestamp 400929947 352228630>
(DF)
16:46:44.190492 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 369: 192.168.10.4.44338
> 66.38.151.10.80: P 1:304(303) ack 1 win 17280 <nop,nop,timestamp 400929947
352228630> (DF)
16:46:44.447139 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 66: 66.38.151.10.80 >
192.168.10.4.44338: . ack 304 win 31944 <nop,nop,timestamp 352228656
400929947> (DF)16:46:44.673701 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 376:
66.38.151.10.80 > 192.168.10.4.44338: P 1:311(310) ack 304 win 31944
<nop,nop,timestamp 352228679 400929947> (DF)
16:46:44.679697 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 66: 192.168.10.4.44338
> 66.38.151.10.80: . ack 311 win 17280 <nop,nop,timestamp 400929948
352228679> (DF)16:50:21.348353 0:0:21:fa:19:88 0:c0:26:10:1f:d9 0800 66:
192.168.10.4.44338 > 66.38.151.10.80: F 304:304(0) ack 311 win 17280
<nop,nop,timestamp 400930381 352228679> (DF)
16:50:21.593249 0:c0:26:10:1f:d9 0:0:21:fa:19:88 0800 66: 66.38.151.10.80 >
192.168.10.4.44338: . ack 305 win 31944 <nop,nop,timestamp 352250370
400930381> (DF)^C
35 packets received by filter
0 packets dropped by kernel
#
Visit your host, monkey.org