pf(4) + fetch(1) + http://ftp.gnu.org

[Iulian M]

On Friday 15 June 2007, Vlad GURDIGA wrote:
> On 15/06/07, Chuck Swiger <cswiger at mac.com> wrote:
> > On Jun 14, 2007, at 2:24 PM, Vlad GURDIGA wrote:
> > >> Presumably you want to make sure that fetch(1) is using:
> > >>
> > >>       FTP_PASSIVE_MODE    If set to anything but `no', forces the FTP
> > >> code to
> > >>                           use passive mode.
> > >
> > > Just in case, I have checked my environment and FTP_PASSIVE_MODE is
> > > set to "yes". I'm saying "just in case" because the downloads were
> > > from "http://ftp.gnu.org", not from "ftp://ftp.gnu.org", I mean the
> > > HTTP protocol was used, not FTP.
> >
> > Hrm, missed that part, or perhaps just ran with the ftp.gnu.org
> > hostname implying FTP access.  :-)
> >
> > I might watch out for the "no-df" entry to your scrub line, as it is
> > probably breaking PMTUd:
>
> I thought about it too and ran a test with that line commented out,
> but it did not help.
>


Try to enable logging in pf and see if it's dropping anything. Also just to be 
sure try removing the scrubbing to see if it makes any difference.


-- 
Best Regards,
Iulian Margarintescu
http://www.erata.net
eti at erata.net
(spamassassin & pf & spamd all said it's OK to make it public ;-) )
Key ID: 0x03176E5CEDEFF7AB
I prefer plain text email
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20070615/70ce163a/attachment.pgp