From owner-freebsd-stable@FreeBSD.ORG Thu Aug 12 02:17:50 2004 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9E23D16A4CE for ; Thu, 12 Aug 2004 02:17:50 +0000 (GMT) Received: from farside.isc.org (farside.isc.org [204.152.187.5]) by mx1.FreeBSD.org (Postfix) with ESMTP id 784BC43D48 for ; Thu, 12 Aug 2004 02:17:50 +0000 (GMT) (envelope-from Mark_Andrews@isc.org) Received: from drugs.dv.isc.org (localhost [IPv6:::1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by farside.isc.org (Postfix) with ESMTP id 628D22BC24 for ; Thu, 12 Aug 2004 02:17:48 +0000 (UTC) (envelope-from marka@isc.org) Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (8.12.11/8.12.11) with ESMTP id i7C22HTT000463 for ; Thu, 12 Aug 2004 12:02:18 +1000 (EST) (envelope-from marka@drugs.dv.isc.org) Message-Id: <200408120202.i7C22HTT000463@drugs.dv.isc.org> To: stable@freebsd.org From: Mark Andrews Date: Thu, 12 Aug 2004 12:02:17 +1000 Sender: Mark_Andrews@isc.org Subject: 4.10 STABLE: IPv6 PMTU Discovery broken X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Aug 2004 02:17:50 -0000 I have a 4.10 stable box updated around August 1. It was previously running 4.9-pre and was working fine. It has the following interface configuration. tx0 is internal, sis0 is external. The gif0 interface is providing external IPv6 connectivity. tx0: flags=8843 mtu 1500 inet 192.168.191.233 netmask 0xfffffff8 broadcast 192.168.191.239 inet6 fe80::2e0:29ff:fe19:c02d%tx0 prefixlen 64 scopeid 0x1 inet6 2001:470:1f00:820:2e0:29ff:fe19:c02d prefixlen 64 inet6 2001:470:1f00:820:: prefixlen 64 anycast ether 00:e0:29:19:c0:2d media: Ethernet autoselect (10baseT/UTP) status: active sis0: flags=8843 mtu 1500 inet6 fe80::209:5bff:fe1e:e13e%sis0 prefixlen 64 scopeid 0x2 inet 211.30.120.24 netmask 0xffffff00 broadcast 211.30.120.255 ether 00:09:5b:1e:e1:3e media: Ethernet autoselect (100baseTX ) status: active lp0: flags=8810 mtu 1500 faith0: flags=8002 mtu 1500 lo0: flags=8049 mtu 16384 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5 inet 127.0.0.1 netmask 0xff000000 inet 10.53.0.1 netmask 0xffffffff inet 10.53.0.2 netmask 0xffffffff inet 10.53.0.3 netmask 0xffffffff inet 10.53.0.4 netmask 0xffffffff inet 10.53.0.5 netmask 0xffffffff ppp0: flags=8010 mtu 1500 sl0: flags=c010 mtu 552 gif0: flags=8051 mtu 1280 tunnel inet 211.30.120.24 --> 64.71.128.82 inet6 fe80::2e0:29ff:fe19:c02d%gif0 prefixlen 64 scopeid 0x8 inet6 2001:470:1f00:ffff::5a1 --> 2001:470:1f00:ffff::5a0 prefixlen 128 Internet6: Destination Gateway Flags Refs Use Mtu Netif Expire ::/96 ::1 UGRSc 0 0 16384 lo0 => default 2001:470:1f00:ffff::5a0 UGSc 16 0 1280 gif0 ::1 ::1 UH 4 0 16384 lo0 ::ffff:0.0.0.0/96 ::1 UGRSc 0 0 16384 lo0 2001:470:1f00:820:: 00:e0:29:19:c0:2d UHL 0 0 1500 lo0 => 2001:470:1f00:820::/64 link#1 UC 2 0 1500 tx0 2001:470:1f00:820:208:74ff:fe9f:eeae 00:08:74:9f:ee:ae UHLW 1 12946 1500 tx0 2001:470:1f00:820:2e0:29ff:fe19:c02d 00:e0:29:19:c0:2d UHL 2 6 1500 lo0 2001:470:1f00:ffff::5a0 2001:470:1f00:ffff::5a1 UH 17 0 1280 gif0 2001:470:1f00:ffff::5a1 link#8 UHL 0 0 1280 lo0 fe80::/10 ::1 UGRSc 0 0 16384 lo0 fe80::%tx0/64 link#1 UC 1 0 1500 tx0 fe80::208:74ff:fe9f:eeae%tx0 00:08:74:9f:ee:ae UHLW 0 669 1500 tx0 fe80::2e0:29ff:fe19:c02d%tx0 00:e0:29:19:c0:2d UHL 0 0 1500 lo0 fe80::%sis0/64 link#2 UC 0 0 1500 sis0 fe80::209:5bff:fe1e:e13e%sis0 00:09:5b:1e:e1:3e UHL 0 0 1500 lo0 fe80::%lo0/64 fe80::1%lo0 Uc 0 0 16384 lo0 fe80::1%lo0 link#5 UHL 0 0 16384 lo0 fe80::%gif0/64 link#8 UC 0 0 1280 gif0 fe80::2e0:29ff:fe19:c02d%gif0 link#8 UHL 0 0 1280 lo0 ff01::/32 ::1 U 0 0 16384 lo0 ff02::/16 ::1 UGRS 0 0 16384 lo0 ff02::%tx0/32 link#1 UC 0 0 1500 tx0 ff02::%sis0/32 link#2 UC 0 0 1500 sis0 ff02::%lo0/32 ::1 UC 0 0 16384 lo0 ff02::%gif0/32 link#8 UC 0 0 1280 gif0 The box does not appear to be generating a ICMP6 too big error message which I would expect to see once the 1428 octet TCP segments start arriving. bsdi# tcpdump -n -p host 2001:4f8:3:bb:290:27ff:fe73:82e5 or icmp6 tcpdump: listening on tx0 11:24:05.545477 2001:470:1f00:820:2e0:29ff:fe19:c02d > 2001:470:1f00:820:208:74ff:fe9f:eeae: icmp6: neighbor sol: who has 2001:470:1f00:820:208:74ff:fe9f:eeae 11:24:05.545749 2001:470:1f00:820:208:74ff:fe9f:eeae > 2001:470:1f00:820:2e0:29ff:fe19:c02d: icmp6: neighbor adv: tgt is 2001:470:1f00:820:208:74ff:fe9f:eeae 11:24:05.874471 2001:470:1f00:820:208:74ff:fe9f:eeae > 2001:470:1f00:820:2e0:29ff:fe19:c02d: icmp6: neighbor sol: who has 2001:470:1f00:820:2e0:29ff:fe19:c02d 11:24:05.874692 2001:470:1f00:820:2e0:29ff:fe19:c02d > 2001:470:1f00:820:208:74ff:fe9f:eeae: icmp6: neighbor adv: tgt is 2001:470:1f00:820:2e0:29ff:fe19:c02d 11:24:13.640153 2001:470:1f00:820:208:74ff:fe9f:eeae.3873 > 2001:4f8:3:bb:290:27ff:fe73:82e5.22: S 2485693794:2485693794(0) win 57344 11:24:13.904665 2001:4f8:3:bb:290:27ff:fe73:82e5.22 > 2001:470:1f00:820:208:74ff:fe9f:eeae.3873: S 798565385:798565385(0) ack 2485693795 win 57344 [flowlabel 0x39] 11:24:13.904940 2001:470:1f00:820:208:74ff:fe9f:eeae.3873 > 2001:4f8:3:bb:290:27ff:fe73:82e5.22: . ack 1 win 58548 11:24:14.114945 2001:4f8:3:bb:290:27ff:fe73:82e5.22 > 2001:470:1f00:820:208:74ff:fe9f:eeae.3873: P 1:52(51) ack 1 win 58548 [flowlabel 0x41b4c] 11:24:14.115850 2001:470:1f00:820:208:74ff:fe9f:eeae.3873 > 2001:4f8:3:bb:290:27ff:fe73:82e5.22: P 1:52(51) ack 52 win 58548 11:24:14.317294 2001:4f8:3:bb:290:27ff:fe73:82e5.22 > 2001:470:1f00:820:208:74ff:fe9f:eeae.3873: P 52:540(488) ack 52 win 58548 [flowlabel 0x41b4c] 11:24:14.318491 2001:470:1f00:820:208:74ff:fe9f:eeae.3873 > 2001:4f8:3:bb:290:27ff:fe73:82e5.22: P 52:708(656) ack 540 win 58060 11:24:14.619697 2001:4f8:3:bb:290:27ff:fe73:82e5.22 > 2001:470:1f00:820:208:74ff:fe9f:eeae.3873: . ack 708 win 58548 [flowlabel 0x41b4c] 11:24:14.748280 2001:4f8:3:bb:290:27ff:fe73:82e5.22 > 2001:470:1f00:820:208:74ff:fe9f:eeae.3873: P 540:1580(1040) ack 708 win 58548 [flowlabel 0x41b4c] 11:24:14.844695 2001:470:1f00:820:208:74ff:fe9f:eeae.3873 > 2001:4f8:3:bb:290:27ff:fe73:82e5.22: . ack 1580 win 58548 11:24:14.977668 2001:470:1f00:820:208:74ff:fe9f:eeae.3873 > 2001:4f8:3:bb:290:27ff:fe73:82e5.22: P 708:740(32) ack 1580 win 58548 11:24:15.041480 2001:4f8:3:bb:290:27ff:fe73:82e5.22 > 2001:470:1f00:820:208:74ff:fe9f:eeae.3873: P 1580:1612(32) ack 708 win 58548 [flowlabel 0x41b4c] 11:24:15.134739 2001:470:1f00:820:208:74ff:fe9f:eeae.3873 > 2001:4f8:3:bb:290:27ff:fe73:82e5.22: P 740:828(88) ack 1612 win 58548 11:24:15.274904 2001:4f8:3:bb:290:27ff:fe73:82e5.22 > 2001:470:1f00:820:208:74ff:fe9f:eeae.3873: . ack 740 win 58548 [flowlabel 0x41b4c] 11:24:15.398143 2001:4f8:3:bb:290:27ff:fe73:82e5.22 > 2001:470:1f00:820:208:74ff:fe9f:eeae.3873: P 1612:1700(88) ack 828 win 58548 [flowlabel 0x41b4c] 11:24:15.399848 2001:470:1f00:820:208:74ff:fe9f:eeae.3873 > 2001:4f8:3:bb:290:27ff:fe73:82e5.22: P 828:1924(1096) ack 1700 win 58548 11:24:15.632581 2001:4f8:3:bb:290:27ff:fe73:82e5.22 > 2001:470:1f00:820:208:74ff:fe9f:eeae.3873: P 1700:2812(1112) ack 1924 win 58548 [flowlabel 0x41b4c] 11:24:15.724707 2001:470:1f00:820:208:74ff:fe9f:eeae.3873 > 2001:4f8:3:bb:290:27ff:fe73:82e5.22: . ack 2812 win 58548 11:24:17.851288 2001:470:1f00:820:208:74ff:fe9f:eeae.3873 > 2001:4f8:3:bb:290:27ff:fe73:82e5.22: . 1924:3352(1428) ack 2812 win 58548 11:24:18.874758 fe80::208:74ff:fe9f:eeae > fe80::2e0:29ff:fe19:c02d: icmp6: neighbor sol: who has fe80::2e0:29ff:fe19:c02d 11:24:18.874917 fe80::2e0:29ff:fe19:c02d > fe80::208:74ff:fe9f:eeae: icmp6: neighbor adv: tgt is fe80::2e0:29ff:fe19:c02d 11:24:19.045947 2001:470:1f00:820:208:74ff:fe9f:eeae.3873 > 2001:4f8:3:bb:290:27ff:fe73:82e5.22: . 1924:3352(1428) ack 2812 win 58548 11:24:21.245989 2001:470:1f00:820:208:74ff:fe9f:eeae.3873 > 2001:4f8:3:bb:290:27ff:fe73:82e5.22: . 1924:3352(1428) ack 2812 win 58548 11:24:23.545730 fe80::2e0:29ff:fe19:c02d > fe80::208:74ff:fe9f:eeae: icmp6: neighbor sol: who has fe80::208:74ff:fe9f:eeae 11:24:23.545997 fe80::208:74ff:fe9f:eeae > fe80::2e0:29ff:fe19:c02d: icmp6: neighbor adv: tgt is fe80::208:74ff:fe9f:eeae 11:24:25.446086 2001:470:1f00:820:208:74ff:fe9f:eeae.3873 > 2001:4f8:3:bb:290:27ff:fe73:82e5.22: . 1924:3352(1428) ack 2812 win 58548 11:24:33.646275 2001:470:1f00:820:208:74ff:fe9f:eeae.3873 > 2001:4f8:3:bb:290:27ff:fe73:82e5.22: . 1924:3352(1428) ack 2812 win 58548 11:24:49.846641 2001:470:1f00:820:208:74ff:fe9f:eeae.3873 > 2001:4f8:3:bb:290:27ff:fe73:82e5.22: . 1924:3352(1428) ack 2812 win 58548 11:24:54.875567 fe80::208:74ff:fe9f:eeae > fe80::2e0:29ff:fe19:c02d: icmp6: neighbor sol: who has fe80::2e0:29ff:fe19:c02d 11:24:54.875742 fe80::2e0:29ff:fe19:c02d > fe80::208:74ff:fe9f:eeae: icmp6: neighbor adv: tgt is fe80::2e0:29ff:fe19:c02d 11:24:59.546349 fe80::2e0:29ff:fe19:c02d > fe80::208:74ff:fe9f:eeae: icmp6: neighbor sol: who has fe80::208:74ff:fe9f:eeae 11:24:59.546619 fe80::208:74ff:fe9f:eeae > fe80::2e0:29ff:fe19:c02d: icmp6: neighbor adv: tgt is fe80::208:74ff:fe9f:eeae ^C 741 packets received by filter 0 packets dropped by kernel 00100 10 752 allow ipv6 from any to any via lo0 00200 0 0 allow ipv6-icmp from :: to ff02::/16 00300 40 1120 allow ipv6-icmp from fe80::/10 to fe80::/10 00400 6 336 allow ipv6-icmp from fe80::/10 to ff02::/16 00500 0 0 deny ipv6 from any to ::1 00600 0 0 deny ipv6 from ::1 to any 00700 0 0 deny ipv6 from any to ::ffff:0.0.0.0/96 00800 0 0 deny ipv6 from ::224.0.0.0/100 to any in 00900 0 0 deny ipv6 from any to ::224.0.0.0/100 in 01000 0 0 deny ipv6 from ::127.0.0.0/104 to any in 01100 0 0 deny ipv6 from any to ::127.0.0.0/104 in 01200 0 0 deny ipv6 from ::/104 to any in 01300 0 0 deny ipv6 from any to ::/104 in 01400 0 0 deny ipv6 from ::255.0.0.0/104 to any in 01500 0 0 deny ipv6 from any to ::255.0.0.0/104 in 01600 0 0 deny ipv6 from ::/96 to any in 01700 0 0 deny ipv6 from any to ::/96 in 01800 0 0 deny ipv6 from 2002:e000::/20 to any in 01900 0 0 deny ipv6 from any to 2002:e000::/20 in 02000 0 0 deny ipv6 from 2002:7f00::/24 to any in 02100 0 0 deny ipv6 from any to 2002:7f00::/24 in 02200 0 0 deny ipv6 from 2002::/24 to any in 02300 0 0 deny ipv6 from any to 2002::/24 in 02400 0 0 deny ipv6 from 2002:ff00::/24 to any in 02500 0 0 deny ipv6 from any to 2002:ff00::/24 in 02600 0 0 deny ipv6 from 2002:a00::/24 to any in 02700 0 0 deny ipv6 from any to 2002:a00::/24 in 02800 0 0 deny ipv6 from 2002:ac10::/28 to any in 02900 0 0 deny ipv6 from any to 2002:ac10::/28 in 03000 0 0 deny ipv6 from 2002:c0a8::/32 to any in 03100 0 0 deny ipv6 from any to 2002:c0a8::/32 in 03200 0 0 deny ipv6 from ff05::/16 to any in 03300 0 0 deny ipv6 from any to ff05::/16 in 03400 1914 285058 allow ipv6 from any to any in recv tx0 03500 4 313 allow tcp from any to any 53 established 03600 3 92 allow tcp from any 53 to any established 03700 2353 233933 allow tcp from any to any 22 established 03800 40 12524 allow tcp from any 22 to any established 03900 0 0 allow ipv6 from any to any frag 04000 14 480 allow tcp from any to any 22 out setup 04100 0 0 allow tcp from 2001:470:1f00:820::/64 to any 22 in setup 04200 0 0 allow tcp from any to any 22 in setup 04300 1 40 allow tcp from any to any 53 setup 04400 0 0 allow tcp from any to any out setup 04500 0 0 allow tcp from any to any out tcpflg rst 04600 0 0 allow tcp from any to any established 04700 0 0 reset tcp from any to any 113 setup 04800 0 0 deny log tcp from any to any setup 04900 5 816 allow udp from any to any 53 in 05000 5 1376 allow udp from any 53 to any out 05100 0 0 allow udp from any 1024-5000 to any 53 out 05200 0 0 allow udp from any 53 to any 1024-5000 in 05300 0 0 allow udp from any 49152-65535 to any 53 out 05400 0 0 allow udp from any 53 to any 49152-65535 in 05500 0 0 deny udp from any to any 514 in 05600 0 0 deny udp from any to any 137 in 05700 0 0 deny udp from any 138 to any 138 in 05800 0 0 deny udp from any 520 to any 520 in 05900 0 0 deny udp from any 4997 to any 4997 in 06000 0 0 deny udp from any 500 to any 500 in 06100 69 18367 allow ipv6-icmp from any to any 06200 0 0 deny udp from any to ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff in 06300 0 0 allow udp from any 32768-65535 to any out 06400 0 0 allow udp from any to any 32768-65535 in 06500 0 0 unreach admin log udp from any to any 06600 0 0 deny log ipv6 from any to any 65535 0 0 deny ipv6 from any to any bsdi# sys/netinet versions. /accf_data.c/1.1.2.2/Wed Sep 20 21:34:13 2000//TRELENG_4 /accf_http.c/1.1.2.4/Wed May 1 08:34:37 2002//TRELENG_4 /icmp6.h/1.2.2.5/Sat Jun 29 18:31:11 2002//TRELENG_4 /icmp_var.h/1.15.2.2/Fri Dec 7 09:23:11 2001//TRELENG_4 /if_atm.c/1.8.2.1/Thu Dec 20 10:30:18 2001//TRELENG_4 /if_atm.h/1.2.6.2/Thu Dec 20 10:30:18 2001//TRELENG_4 /if_ether.h/1.24.2.1/Wed Feb 13 21:38:56 2002//TRELENG_4 /if_fddi.h/1.8/Wed Dec 29 04:40:58 1999//TRELENG_4 /igmp.c/1.29.2.2/Thu Jan 23 21:06:44 2003//TRELENG_4 /igmp.h/1.10/Sat Aug 28 00:49:15 1999//TRELENG_4 /igmp_var.h/1.17/Wed Dec 29 04:40:59 1999//TRELENG_4 /in.c/1.44.2.14/Fri Nov 8 00:45:50 2002//TRELENG_4 /in_cksum.c/1.6/Sat Aug 28 00:49:16 1999//TRELENG_4 /in_gif.c/1.5.2.11/Thu Jan 23 21:06:45 2003//TRELENG_4 /in_gif.h/1.3.2.4/Fri Nov 8 16:57:13 2002//TRELENG_4 /in_hostcache.c/1.3/Sat Aug 28 00:49:16 1999//TRELENG_4 /in_hostcache.h/1.3/Wed Dec 29 04:40:59 1999//TRELENG_4 /in_rmx.c/1.37.2.3/Fri Aug 9 14:49:23 2002//TRELENG_4 /in_systm.h/1.9/Wed Dec 29 04:41:00 1999//TRELENG_4 /in_var.h/1.33.2.3/Fri Dec 14 20:09:34 2001//TRELENG_4 /ip6.h/1.2.2.2/Tue Jul 3 11:01:46 2001//TRELENG_4 /ip_divert.c/1.42.2.6/Thu Jan 23 21:06:45 2003//TRELENG_4 /ip_ecn.c/1.1.2.3/Wed Apr 17 07:50:17 2002//TRELENG_4 /ip_ecn.h/1.2.2.2/Tue Jul 3 11:01:46 2001//TRELENG_4 /ip_encap.c/1.1.2.5/Thu Jan 23 21:06:45 2003//TRELENG_4 /ip_encap.h/1.1.2.2/Wed Nov 20 23:20:54 2002//TRELENG_4 /ip_flow.c/1.9.2.2/Sun Nov 4 17:35:31 2001//TRELENG_4 /ip_flow.h/1.2/Sat Aug 28 00:49:22 1999//TRELENG_4 /ip_fw.c/1.131.2.39/Mon Jan 20 02:23:07 2003//TRELENG_4 /ip_fw.h/1.47.2.11/Tue Jul 9 09:11:42 2002//TRELENG_4 /ip_gre.h/1.2.2.1/Sun Dec 1 14:03:10 2002/-kk/TRELENG_4 /ip_icmp.c/1.39.2.19/Fri Jan 24 05:11:34 2003//TRELENG_4 /ip_icmp.h/1.16/Wed Dec 29 04:41:01 1999//TRELENG_4 /ip_id.c/1.1.2.1/Thu Jul 19 06:37:26 2001//TRELENG_4 /ipprotosw.h/1.1/Wed Dec 22 19:13:23 1999//TRELENG_4 /tcp_debug.c/1.16.2.1/Sat Jul 15 07:14:31 2000//TRELENG_4 /tcp_debug.h/1.11/Sat Jan 29 11:49:05 2000//TRELENG_4 /tcp_fsm.h/1.14/Sun Nov 7 04:18:30 1999//TRELENG_4 /tcp_seq.h/1.11.2.7/Mon Feb 3 02:33:10 2003//TRELENG_4 /tcp_timer.c/1.34.2.14/Mon Feb 3 02:33:41 2003//TRELENG_4 /tcp_timer.h/1.18.2.1/Fri Aug 16 22:16:39 2002//TRELENG_4 /tcpip.h/1.8/Sat Aug 28 00:49:34 1999//TRELENG_4 /udp.h/1.7/Sat Aug 28 00:49:34 1999//TRELENG_4 /udp_var.h/1.22.2.1/Sun Feb 18 07:12:25 2001//TRELENG_4 /ip_dummynet.h/1.10.2.9/Wed Aug 6 01:45:00 2003//TRELENG_4 /in_pcb.h/1.32.2.8/Sun Oct 5 14:29:51 2003//TRELENG_4 /in_proto.c/1.53.2.7/Sun Oct 5 14:29:51 2003//TRELENG_4 /ip_mroute.c/1.56.2.10/Sun Oct 5 14:29:52 2003//TRELENG_4 /ip_mroute.h/1.17.2.3/Sun Oct 5 14:29:52 2003//TRELENG_4 /ip_var.h/1.50.2.14/Sun Oct 5 14:29:52 2003//TRELENG_4 /pim.h/1.1.2.1/Sun Aug 24 17:04:44 2003//TRELENG_4 /pim_var.h/1.1.2.1/Sun Aug 24 17:04:44 2003//TRELENG_4 /udp_usrreq.c/1.64.2.19/Sun Oct 5 14:29:52 2003//TRELENG_4 /if_ether.c/1.64.2.27/Fri Dec 19 13:38:44 2003//TRELENG_4 /ip_input.c/1.130.2.54/Fri Dec 19 13:38:47 2003//TRELENG_4 /ip_dummynet.c/1.24.2.26/Wed Jan 14 23:40:38 2004//TRELENG_4 /ip_gre.c/1.7.2.2/Sun Feb 1 12:51:17 2004/-kk/TRELENG_4 /ip.h/1.17.2.2/Tue Mar 9 11:52:40 2004//TRELENG_4 /tcp.h/1.13.2.5/Tue Mar 9 11:52:40 2004//TRELENG_4 /tcp_output.c/1.39.2.21/Tue Mar 9 11:52:41 2004//TRELENG_4 /tcp_subr.c/1.73.2.33/Tue Mar 9 11:52:41 2004//TRELENG_4 /tcp_syncache.c/1.5.2.15/Tue Mar 9 11:52:41 2004//TRELENG_4 /tcp_var.h/1.56.2.15/Tue Mar 9 11:52:42 2004//TRELENG_4 /tcp_input.c/1.107.2.41/Thu Apr 22 03:31:56 2004//TRELENG_4 /in_pcb.c/1.59.2.28/Thu May 6 08:21:31 2004//TRELENG_4 /tcp_usrreq.c/1.51.2.22/Thu May 6 08:21:33 2004//TRELENG_4 /in.h/1.48.2.12/Sun Aug 1 23:32:59 2004//TRELENG_4 /ip_fw2.c/1.6.2.22/Sun Aug 1 23:33:00 2004//TRELENG_4 /ip_fw2.h/1.1.2.5/Sun Aug 1 23:33:01 2004//TRELENG_4 /ip_output.c/1.99.2.45/Sun Aug 1 23:33:01 2004//TRELENG_4 /raw_ip.c/1.64.2.19/Sun Aug 1 23:33:01 2004//TRELENG_4 sys/netinet6: /README/1.2.2.1/Sat Jul 15 07:14:32 2000//TRELENG_4 /ah.h/1.3.2.3/Sun Apr 28 05:40:26 2002//TRELENG_4 /ah6.h/1.2.2.2/Tue Jul 3 11:01:49 2001//TRELENG_4 /ah_core.c/1.2.2.5/Sun Apr 28 05:40:26 2002//TRELENG_4 /ah_input.c/1.1.2.6/Sun Apr 28 05:40:26 2002//TRELENG_4 /dest6.c/1.1.2.4/Sun Apr 28 05:40:26 2002//TRELENG_4 /esp.h/1.2.2.3/Sun Apr 28 05:40:26 2002//TRELENG_4 /esp6.h/1.2.2.2/Tue Jul 3 11:01:49 2001//TRELENG_4 /esp_core.c/1.1.2.4/Tue Mar 26 10:12:29 2002//TRELENG_4 /esp_rijndael.c/1.1.2.2/Sat Jan 11 19:10:59 2003//TRELENG_4 /esp_rijndael.h/1.1.2.1/Tue Jul 3 11:01:50 2001//TRELENG_4 /frag6.c/1.2.2.6/Sun Apr 28 05:40:26 2002//TRELENG_4 /icmp6.h/1.5.2.1/Sat Jul 15 07:14:33 2000//TRELENG_4 /in6.h/1.7.2.7/Thu Aug 1 19:38:50 2002//TRELENG_4 /in6_gif.c/1.2.2.7/Thu Jan 23 21:06:47 2003//TRELENG_4 /in6_gif.h/1.2.2.3/Fri Nov 8 16:57:13 2002//TRELENG_4 /in6_ifattach.c/1.2.2.6/Sun Apr 28 05:40:26 2002//TRELENG_4 /in6_ifattach.h/1.1.2.2/Tue Jul 3 11:01:52 2001//TRELENG_4 /in6_pcb.h/1.2.2.3/Mon Aug 13 16:26:17 2001//TRELENG_4 /in6_prefix.c/1.4.2.3/Tue Jul 3 11:01:52 2001//TRELENG_4 /in6_prefix.h/1.1.2.2/Tue Jul 3 11:01:52 2001//TRELENG_4 /in6_proto.c/1.6.2.9/Fri Jan 24 05:11:35 2003//TRELENG_4 /in6_rmx.c/1.1.2.3/Sun Apr 28 05:40:27 2002//TRELENG_4 /in6_src.c/1.1.2.3/Tue Feb 26 18:02:06 2002//TRELENG_4 /in6_var.h/1.3.2.3/Sun Apr 28 05:40:27 2002//TRELENG_4 /ip6.h/1.4.2.1/Sat Jul 15 07:14:34 2000//TRELENG_4 /ip6_ecn.h/1.2.2.2/Tue Jul 3 11:01:53 2001//TRELENG_4 /ip6_forward.c/1.4.2.7/Fri Jan 24 05:11:35 2003//TRELENG_4 /ip6_fw.h/1.3.2.7/Sun Apr 28 05:40:27 2002//TRELENG_4 /ip6_mroute.h/1.2.2.3/Sun Apr 28 05:40:27 2002//TRELENG_4 /ip6_var.h/1.2.2.4/Thu Jan 23 21:06:47 2003//TRELENG_4 /ip6protosw.h/1.2.2.4/Sun Apr 28 05:40:27 2002//TRELENG_4 /ipcomp.h/1.1.2.3/Sun Apr 28 05:40:27 2002//TRELENG_4 /ipcomp6.h/1.1.2.2/Tue Jul 3 11:01:54 2001//TRELENG_4 /ipcomp_core.c/1.1.2.5/Sat Jan 11 19:10:59 2003//TRELENG_4 /ipcomp_input.c/1.1.2.3/Sun Apr 28 05:40:27 2002//TRELENG_4 /ipsec6.h/1.3.2.2/Tue Jul 3 11:01:54 2001//TRELENG_4 /mld6.c/1.4.2.4/Thu Jan 23 21:06:47 2003//TRELENG_4 /mld6_var.h/1.1.2.1/Sat Jul 15 07:14:36 2000//TRELENG_4 /nd6_nbr.c/1.4.2.6/Thu Jan 23 21:06:47 2003//TRELENG_4 /pim6.h/1.1.2.1/Sat Jul 15 07:14:36 2000//TRELENG_4 /pim6_var.h/1.2.2.1/Sat Jul 15 07:14:36 2000//TRELENG_4 /raw_ip6.c/1.7.2.7/Fri Jan 24 05:11:35 2003//TRELENG_4 /raw_ip6.h/1.1.2.1/Tue Jul 3 11:01:55 2001//TRELENG_4 /route6.c/1.1.2.5/Thu Jan 23 21:06:47 2003//TRELENG_4 /scope6.c/1.1.2.3/Mon Apr 1 15:29:04 2002//TRELENG_4 /scope6_var.h/1.1.2.1/Sat Jul 15 07:14:38 2000//TRELENG_4 /tcp6_var.h/1.3.2.2/Fri Dec 14 20:21:11 2001//TRELENG_4 /udp6_output.c/1.1.2.6/Thu Jan 23 21:06:47 2003//TRELENG_4 /udp6_usrreq.c/1.6.2.13/Fri Jan 24 05:11:35 2003//TRELENG_4 /udp6_var.h/1.3.2.1/Sat Jul 15 07:14:38 2000//TRELENG_4 /ah_output.c/1.1.2.5/Wed Aug 6 01:45:01 2003//TRELENG_4 /in6_cksum.c/1.1.2.4/Wed Aug 6 01:45:01 2003//TRELENG_4 /ipcomp_output.c/1.1.2.4/Wed Aug 6 01:45:02 2003//TRELENG_4 /ipsec.c/1.3.2.12/Wed Aug 6 01:45:02 2003//TRELENG_4 /nd6.c/1.2.2.16/Thu Aug 14 02:36:40 2003//TRELENG_4 /nd6.h/1.2.2.6/Thu Aug 14 02:36:40 2003//TRELENG_4 /nd6_rtr.c/1.2.2.6/Thu Aug 14 02:36:40 2003//TRELENG_4 /esp_input.c/1.1.2.9/Fri Dec 19 13:38:48 2003//TRELENG_4 /esp_output.c/1.1.2.5/Fri Dec 19 13:38:49 2003//TRELENG_4 /in6_pcb.c/1.10.2.10/Wed Jan 14 23:40:44 2004//TRELENG_4 /ip6_fw.c/1.2.2.12/Wed Jan 14 23:40:44 2004//TRELENG_4 /ip6_mroute.c/1.2.2.10/Wed Jan 14 23:40:44 2004//TRELENG_4 /ipsec.h/1.4.2.5/Tue Mar 9 11:52:42 2004//TRELENG_4 /icmp6.c/1.6.2.14/Thu Apr 22 03:31:58 2004//TRELENG_4 /in6.c/1.7.2.11/Thu Apr 22 03:31:58 2004//TRELENG_4 /ip6_output.c/1.13.2.20/Thu Apr 22 03:32:00 2004//TRELENG_4 /ip6_input.c/1.11.2.16/Sun Aug 1 23:33:03 2004//TRELENG_4 The IPv4 firewalling is a mixture of ipfw and ipf. Is this a known issue? Do you need more information? Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews@isc.org