Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 23 May 2022 21:47:21 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 264193] Broken scrub max-mss
Message-ID:  <bug-264193-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D264193

            Bug ID: 264193
           Summary: Broken scrub max-mss
           Product: Base System
           Version: 13.1-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: oleg@mamontov.net

I use pf scrub feature for adjusting TCP MSS on policy routed via wireguard
tunnel SMTP traffic:

# pfctl -sr | grep scrub
scrub on wg-ep proto tcp all max-mss 1380 fragment reassemble

The rule suddenly stopped working after upgrading from 13.0-RELEASE-p11 to
13.1-RELEASE.

Below is the result on 13.0 (works as expected):

12:10:48.016196 IP 212.109.198.23.465 > 192.168.24.44.56695: Flags [S.], seq
687795294, ack 3030165102, win 65535, options [mss 1380,nop,wscale 6,sackOK=
,TS
val
4107107091 ecr 1376219825], length 0

But 13.1 shows that MSS remains intact (default for ethernet with mtu 1500):

11:52:23.910283 IP 212.109.198.23.465 > 192.168.24.44.55961: Flags [S.], seq
3877530257, ack 3326182804, win 65535, options [mss 1460,nop,wscale 6,sackO=
K,TS
val
2918817557 ecr 1485323373], length 0

However, matching counter is still increasing:
# pfctl -vvsr | grep -A1 scrub
@0 scrub on wg-ep proto tcp all max-mss 1380 fragment reassemble
  [ Evaluations: 1370      Packets: 38        Bytes: 1543        States: 0=
=20=20=20=20
]

Downgrading to 13.0 fixes the behaviour again.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-264193-227>