[pf4freebsd] Re: nfsd send error 1 probably caused by pf ?

[Daniel Hartmeier]

On Wed, Nov 12, 2003 at 10:56:54PM +0100, Florian C. Smeets wrote:

> Nov 12 19:38:57 bender kernel: nfsd send error 1

Are you using nfs over udp or tcp?

If you are using scrub, try adding 'no-df' to all scrub rules. Some nfs
implementations (Linux and Solaris, mostly) use fragments with DF set,
which get dropped by scrub unless you use no-df.

If that doesn't solve it, add 'log' to all block rules and watch pflog
for blocked packets. Enable debug logging (pfctl -xm) and watch
/var/log/messages for pf related messages. Do you see fragment
reassembly there?

Daniel