Date: Thu, 05 Mar 2009 12:30:30 +0100 From: Ivan Voras <ivoras@freebsd.org> To: freebsd-net@freebsd.org Subject: IPFW and IPv6 TCP timeout problem Message-ID: <good54$65u$1@ger.gmane.org>
next in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigCB8AA5F03180B3F3846100BB Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi, It appears that IPFW drops dynamic (state-keeping) rules for idle IPv6 TCP connections after a short (60 seconds by default) timeout. This of course creates problems for services like SSH and NFS. I've contacted Luigi Rizzo about it but he cannot help with the IPv6 part of the ipfw. His guess is that the part that should send keepalive ACK packets like ipfw does for IPv4 is broken or nonexistent for IPv6. Any takers? Should I file a PR? --------------enigCB8AA5F03180B3F3846100BB Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJr7fWldnAQVacBcgRArDOAJ9hD+4d2K0HlDqVZv6C1f6VSpmlvACg+GY9 pDlGJQYGSeGy781OezKmMsU= =rKR+ -----END PGP SIGNATURE----- --------------enigCB8AA5F03180B3F3846100BB--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?good54$65u$1>