Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 16 Feb 2016 02:16:19 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality
Message-ID:  <bug-207087-8-aw866KGwSf@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-207087-8@https.bugs.freebsd.org/bugzilla/>
References:  <bug-207087-8@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087

--- Comment #34 from g_amanakis@yahoo.com ---
The only hypothesis I have is that when fragmentation is needed for an outgoing
packet (I have no idea why) and the client sending this packet is behind NAT,
the gateway cannot see the real IP of the client in order to send him the
ICMP-fragmentation-required because the icmp_error() occurs after the outgoing
packet has gone through the pfil hooks (and ipfw).

Can someone watching this report reproduce the symptoms using IPFW+NAT?

-- 
You are receiving this mail because:
You are on the CC list for the bug.


Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-207087-8-aw866KGwSf>