From owner-freebsd-ipfw@freebsd.org  Sat Jun  4 19:45:57 2016
Return-Path: <owner-freebsd-ipfw@freebsd.org>
Delivered-To: freebsd-ipfw@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6ED51B689DE
 for <freebsd-ipfw@mailman.ysv.freebsd.org>;
 Sat,  4 Jun 2016 19:45:57 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from kenobi.freebsd.org (kenobi.freebsd.org
 [IPv6:2001:1900:2254:206a::16:76])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 5F60016ED
 for <freebsd-ipfw@FreeBSD.org>; Sat,  4 Jun 2016 19:45:57 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from bugs.freebsd.org ([127.0.1.118])
 by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id u54Jjvi7051445
 for <freebsd-ipfw@FreeBSD.org>; Sat, 4 Jun 2016 19:45:57 GMT
 (envelope-from bugzilla-noreply@freebsd.org)
From: bugzilla-noreply@freebsd.org
To: freebsd-ipfw@FreeBSD.org
Subject: [Bug 209680] ipfw: when enabled, net connections time out/ssh
 results in "broken pipe"
Date: Sat, 04 Jun 2016 19:45:57 +0000
X-Bugzilla-Reason: AssignedTo
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: Base System
X-Bugzilla-Component: kern
X-Bugzilla-Version: 11.0-CURRENT
X-Bugzilla-Keywords: 
X-Bugzilla-Severity: Affects Some People
X-Bugzilla-Who: ohartman@zedat.fu-berlin.de
X-Bugzilla-Status: New
X-Bugzilla-Resolution: 
X-Bugzilla-Priority: ---
X-Bugzilla-Assigned-To: freebsd-ipfw@FreeBSD.org
X-Bugzilla-Flags: 
X-Bugzilla-Changed-Fields: 
Message-ID: <bug-209680-7515-elwbewt16F@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-209680-7515@https.bugs.freebsd.org/bugzilla/>
References: <bug-209680-7515@https.bugs.freebsd.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-ipfw>,
 <mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw/>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
 <mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 04 Jun 2016 19:45:57 -0000

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D209680

--- Comment #7 from ohartman@zedat.fu-berlin.de ---
Applying both patches seems to solve the problem of the "broken pipe" with =
ssh.
So far, connections from one system under load to another server also under
heavy load is now with three ssh sessions still active after two hours. This
wasn't the case before, the connections died even under relaxed conditions
rather quickly.

It does not solve the problem with NAT/port forwarding.

--=20
You are receiving this mail because:
You are the assignee for the bug.=