From owner-freebsd-net@FreeBSD.ORG Fri Nov 21 03:26:49 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EE5A416A4CE; Fri, 21 Nov 2003 03:26:49 -0800 (PST) Received: from kozlik.carrier.kiev.ua (kozlik.carrier.kiev.ua [193.193.193.111]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0A56343FE0; Fri, 21 Nov 2003 03:26:44 -0800 (PST) (envelope-from mav@alkar.net) Received: from news.lucky.net (IDENT:root@news.lucky.net [193.193.193.102]) by kozlik.carrier.kiev.ua with ESMTP id hBLBQdpq017274; Fri, 21 Nov 2003 13:26:40 +0200 (EET) (envelope-from mav@alkar.net) Received: (from mail@localhost) by news.lucky.net (8.Who.Cares/8.Who.Cares) id NII02277; Fri, 21 Nov 2003 13:21:37 +0200 (envelope-from mav@alkar.net) From: Alexander Motin To: freebsd-ipfw@freebsd.org, freebsd-net@freebsd.org Date: Fri, 21 Nov 2003 12:52:50 +0200 Organization: Alkar Teleport News Server Message-ID: <3FBDEE82.3020504@alkar.net> References: <3FBCCA12.1000906@alkar.net.lucky.freebsd.ipfw> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Trace: pandora.alkar.net 1069411970 68264 212.86.226.11 (21 Nov 2003 10:52:50 GMT) X-Complaints-To: abuse@alkar.net User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.5b) Gecko/20030913 X-Accept-Language: ru, en-us, en In-Reply-To: <3FBCCA12.1000906@alkar.net.lucky.freebsd.ipfw> X-Verify-Sender: verified Subject: Re: dummynet & IP fragmentation bug X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Nov 2003 11:26:50 -0000 I successfully reproduced this on few different 4.8 routers. Does anybody knows what is this? How to fix or workaround this problem? Alexander Motin wrote: > I have one strange problem with dummynet & IP fragmentation. > > I have FreeBSD 4.8-RELEASE router with few interfaces: > em0: flags=8843 mtu 1500 > options=3 > inet 195.248.191.172 netmask 0xffffffc0 broadcast 195.248.191.191 > ether 00:30:48:20:8e:7e > media: Ethernet autoselect (1000baseTX ) > status: active > ng4: flags=88d1 mtu 1492 > inet 195.248.191.172 --> 212.86.231.58 netmask 0xffffffff > > Interface ng4 have MTU 1492 because it is PPPoE link. > When I do not use dummynet on router and somebody send a big > (>1492bytes) packet to 212.86.231.58 with DontFragment flag set router > generates ICMP reply message (Fragmentation Needed). This is correct. > > But when I use dummynet on that interface: > 10170 pipe 10009 ip from any to any out xmit ng4 > 10175 allow ip from any to any via ng4 > > 10009: 128.000 Kbit/s 0 ms 50 sl. 1 queues (1 buckets) droptail > mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 0 udp 195.248.191.65/53 212.86.231.58/1118 50965 28380582 0 > 0 143 > > router stops sending that ICMP messages. Pipe is not overflowed at that > tme, it is empty. -- Alexander Motin