View previous topic :: View next topic |
Author |
Message |
msteller n00b
![n00b n00b](/images/ranks/rank_rect_0.gif)
![](images/avatars/gallery/Austin_Powers/Austin_Powers_-_Dr_Evil.gif)
Joined: 10 May 2002 Posts: 6 Location: Out There Somewhere
|
Posted: Fri Sep 13, 2002 2:14 am Post subject: network unreachable thru PIX Firewall |
|
|
I have an Ultra 5 running gentoo, compiled the vanilla kernel with devfs. The network is working for local lan multiple subnets/cisco routers. But when I try to access an external site thru our Cisco PIX firewall I get network unreachable. I ran into the same problem with a x86 install a while back, and thought I disabled the advanced routing in the kernel to fix the problem, but this kernel on the sparc64 doesn't have it enabled. Anyone know why this is happening?? Pix is seeing something in the packets it doesn't like I guess. ![Confused :?](images/smiles/icon_confused.gif) |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
Larde Guru
![Guru Guru](/images/ranks/rank_rect_3.gif)
![](images/avatars/176051341442e87eb43982a.gif)
Joined: 07 Jun 2002 Posts: 313 Location: Duesseldorf, Germany
|
Posted: Mon Sep 16, 2002 7:44 pm Post subject: |
|
|
Did you perhaps enable ECN ("IP: TCP Explicit Congestion Notification support")? Our PIX didn't like that...
Hth,
Larde _________________ Someday this will be my home... http://moonage.net/
I'll make you a deal
I'll say I came from Earth and my tongue is taped
|
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
msteller n00b
![n00b n00b](/images/ranks/rank_rect_0.gif)
![](images/avatars/gallery/Austin_Powers/Austin_Powers_-_Dr_Evil.gif)
Joined: 10 May 2002 Posts: 6 Location: Out There Somewhere
|
Posted: Sat Sep 21, 2002 9:59 am Post subject: |
|
|
Larde wrote: | Did you perhaps enable ECN ("IP: TCP Explicit Congestion Notification support")? Our PIX didn't like that...
Hth,
Larde |
IP: TCP Explicit Congestion Notification support was the problem. I removed that option and recompiled the kernel and now I can get thru the PIX firewall.
Thanks |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
|