forwarding with ttl=1

[Dancho Penev]

On Thu, Feb 05, 2004 at 03:17:04PM +0200, Alexander Botov wrote:
>From: "Alexander Botov" <alexb at mail.bg>
>To: <freebsd-questions at freebsd.org>
>Date: Thu, 5 Feb 2004 15:17:04 +0200
>Subject: forwarding with ttl=1
>
>Hi All 
>
>I am newbie with configuring networks under FreeBSD . I have small network with gateway running on FreeBSD 5.2 Release .My ISP offers me pppoe service for connecting to Internet . I didn't have problems with configuring ppp with pppoe . I used nat option wchich works fine for masquerading the local network from the world . The problem is that the ISP's gateway returns every time packets with ttl=1 which makes further forwarding impossible . My gateway returns icmp error mesage "time exceeded" and discards packets . I want to know if I made some mistake with configuring nat service or if not what is the solution of the problem ? Is there any service that can increment ttl and process the packet ? I tried to avoid the checking of ttl in the ip_forward() function in ip_input.c and skipping the decrement of ttl and everything works fine but i think that this is very ugly kernel hack . Probably there is an easy and elegant solution . Any ideas ?

You don't need to hack the kernel because this was already did.
Add

options		IPSTEALTH

in your kernel configuration file, build the new kernel and
set net.inet.ip.ipstealt sysctl variable to 1.
For more information see /usr/src/sys/conf/NOTES and
/usr/src/sys/netinet/ip_input.c.

>
>please excuse my English
>_______________________________________________
>freebsd-questions at freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"

-- 
Dancho Penev