From owner-freebsd-current@FreeBSD.ORG Fri Apr 20 04:36:43 2007 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 59F2016A400 for ; Fri, 20 Apr 2007 04:36:43 +0000 (UTC) (envelope-from craig@xfoil.gank.org) Received: from ion.gank.org (ion.gank.org [69.55.238.164]) by mx1.freebsd.org (Postfix) with ESMTP id 4805F13C45A for ; Fri, 20 Apr 2007 04:36:41 +0000 (UTC) (envelope-from craig@xfoil.gank.org) Received: by ion.gank.org (Postfix, from userid 1001) id BA7171124E; Thu, 19 Apr 2007 23:36:40 -0500 (CDT) Date: Thu, 19 Apr 2007 23:36:38 -0500 From: Craig Boston To: Peter Jeremy Message-ID: <20070420043638.GA4453@nowhere> Mail-Followup-To: Craig Boston , Peter Jeremy , Krassimir Slavchev , freebsd-current@freebsd.org References: <46272B99.9090100@bulinfo.net> <20070419223759.GA4051@turion.vk2pj.dyndns.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20070419223759.GA4051@turion.vk2pj.dyndns.org> User-Agent: Mutt/1.4.2.2i Cc: Krassimir Slavchev , freebsd-current@freebsd.org Subject: Re: network problems? X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Apr 2007 04:36:43 -0000 On Fri, Apr 20, 2007 at 08:37:59AM +1000, Peter Jeremy wrote: > You could try reducing net.inet.tcp.recvspace or disabling > net.inet.tcp.rfc1323 and see if that helps. (Though RELENG5 should > also be affected if this is the problem). I don't know if it's related, but I've had problems with packets to/from a recent -CURRENT box not being able to traverse a pf (running on 6.2-stable) firewall with NAT and state rules. Some of the packets are dropped unless I disable net.inet.tcp.rfc1323 on the system running -CURRENT, enough to cause ssh connections to stall and drop before login. 6.x machines behind the same firewall work just fine. I can provide tcpdump output if someone thinks it will help. Craig