General Questions

Hi,

my config is very simple, LAN and WAN interfaces are set with private and public IPs respectively. Rules are set to permit all packets, which means from any source to any destination and any protocol. I have enabled allow-fragmented-packet option to let packets get thru' on both LAN and WAN interfaces. No other constraints are enabled.
The problem is, when i do ping from private LAN to outside world with giant packet, e.g.
ping -l 1500  google.com, packets are blocked on WAN interface... neither can any hosts outside to ping into private LAN hosts. I dont think I set any rules to block giant packets or fragmented packets. What could be the problem?? Please help, thank you.

when i ping from outside to inside LAN host using giant packet, only can get fragmented packet at LAN interface, in other words, if a giant packet are fragmented into two small packets, only first small packet can get thru', the 2nd one is somehow discarded by m0n0wall... dont know why....

The default LAN rule blocks fragments. You need to change it to allow them if that's what you desire.

thanks, but i think i have changed the setting to enable fragmented packet pass on both LAN and WAN interfaces..