" From: Paul Theodoropoulos <ipfilter@anastrophe.com>
"
" I've solved my problem as follows.
"
" []
"
" i've fixed the problem by moving
"
" pass out quick proto tcp from 206.176.249.129/28 to any flags S keep state
"
" from the middle to the *bottom* of the ruleset, whilst removing the
" flags declaration -
"
" pass out quick proto tcp from 206.176.249.129/28 to any keep state
"
" While I have a vague understanding of why that fixed it, the
" important thing is that now mail with attachments can flow through to
" the sbcglobal mailservers without any problem at all. Why their
" mailservers - and only their mailservers - were sensitive to the
" former configuration is a mystery to me. But even as a n00b, it seems
" to me it indicates a problem at att/sbcglobal/pacbell, not so much
" one on my end. Rather, i've had to modify a previously working
" configuration to accomodate whatever (bizarre) problem they have on their end.
i wonder if it's the flags, and they're not handling tcp handshaking
quite pukka?
________________________________________________________________________
Andrew Hay the genius nature
internet rambler is to see what all have seen
adh@an.bradford.ma.us and think what none thought
|