Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 19 Mar 2008 07:56:48 +0100
From:      Norman Maurer <norman@apache.org>
To:        freebsd-questions@freebsd.org
Subject:   FreeBSD 7.0 and pf
Message-ID:  <1205909808.7011.9.camel@norman-laptop>

next in thread | raw e-mail | index | archive | help
Hi all,

im using freebsd 7.0  + gif interfaces + racoon + pf to filter stuff on
my box. After upgrading to freebsd 7.0 I see some strange behavior. I
see packets get dropped because of bad hdr length. The problems only
seems to happen on traffic between the local nets and nets routed via
ipsec. Here is a tcpdump snipped:

block in on em5: 192.168.175.4.1107 > 192.168.116.6.22:  tcp 544 [bad
hdr length 12 - too short, < 20]

gif interface:
gif5: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> metric 0 mtu 1402
        tunnel inet 213.157.17.67 --> 213.23.198.131
        inet 192.168.116.1 --> 192.168.175.1 netmask 0xffffff00 


Any help is welcome.

Thx
Norman






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1205909808.7011.9.camel>