From owner-freebsd-stable@FreeBSD.ORG Wed Sep 9 08:44:11 2009 Return-Path: Delivered-To: stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 55F44106566B for ; Wed, 9 Sep 2009 08:44:11 +0000 (UTC) (envelope-from mail25@bzerk.org) Received: from ei.bzerk.org (tunnel490.ipv6.xs4all.nl [IPv6:2001:888:10:1ea::2]) by mx1.freebsd.org (Postfix) with ESMTP id D39088FC1C for ; Wed, 9 Sep 2009 08:44:10 +0000 (UTC) Received: from ei.bzerk.org (BOFH@localhost [127.0.0.1]) by ei.bzerk.org (8.14.2/8.14.2) with ESMTP id n898i6vq038036 for ; Wed, 9 Sep 2009 10:44:06 +0200 (CEST) (envelope-from mail25@bzerk.org) Received: (from bulk@localhost) by ei.bzerk.org (8.14.2/8.14.2/Submit) id n898i6tO038035 for stable@freebsd.org; Wed, 9 Sep 2009 10:44:06 +0200 (CEST) (envelope-from mail25@bzerk.org) Date: Wed, 9 Sep 2009 10:44:06 +0200 From: Ruben de Groot To: stable@freebsd.org Message-ID: <20090909084406.GA37977@ei.bzerk.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.2.3i Delivered-To: current@freebsd.org X-Spam-Status: No, score=-1.4 required=5.0 tests=ALL_TRUSTED autolearn=failed version=3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on ei.bzerk.org X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0.1 (ei.bzerk.org [127.0.0.1]); Wed, 09 Sep 2009 10:44:09 +0200 (CEST) X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.0.1 (ei.bzerk.org [192.168.179.40]); Tue, 08 Sep 2009 13:55:28 +0200 (CEST) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0.1 (ei.bzerk.org [127.0.0.1]); Tue, 08 Sep 2009 13:55:03 +0200 (CEST) X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Errors-To: owner-freebsd-current@freebsd.org X-Virus-Scanned: ClamAV 0.94.1/9783/Tue Sep 8 05:50:22 2009 on ei.bzerk.org X-Virus-Status: Clean Cc: Subject: 8.0-BETA2 on soekris discarding packets? X-BeenThere: freebsd-stable@freebsd.org List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Sep 2009 08:44:11 -0000 Hi, I'm trying 8.0-BETA2 on a 4511 soekris board, but found a problem. Outgoing networking is fine, but it looks like incoming connections are silently discarded. No firewall is configured. Here's a tcpdump of normal outgoing DNS traffic (IP address of the soekris is 192.168.179.15): listening on sis0, link-type EN10MB (Ethernet), capture size 96 bytes 10:33:50.053875 IP 192.168.179.15.23093 > ei.lan.domain: 45893+ PTR? 255.179.168.192.in-addr.arpa. (46) 10:33:50.055038 IP ei.lan.domain > 192.168.179.15.23093: 45893 NXDomain* 0/1/0 (109) 10:33:50.066917 IP 192.168.179.15.13890 > ei.lan.domain: 45894+ PTR? 9.179.168.192.in-addr.arpa. (44) 10:33:50.067834 IP ei.lan.domain > 192.168.179.15.13890: 45894* 1/1/1 (113) And here's a dump of an incoming ssh connection: listening on sis0, link-type EN10MB (Ethernet), capture size 96 bytes 10:26:40.176756 IP ei.lan.55742 > 192.168.179.15.ssh: Flags [S], seq 1547228218, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 1961056657 ecr 0,sackOK,eol], length 0 10:26:43.175176 IP ei.lan.55742 > 192.168.179.15.ssh: Flags [S], seq 1547228218, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 1961059657 ecr 0,sackOK,eol], length 0 10:26:46.374688 IP ei.lan.55742 > 192.168.179.15.ssh: Flags [S], seq 1547228218, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 1961062857 ecr 0,sackOK,eol], length 0 10:26:49.574197 IP ei.lan.55742 > 192.168.179.15.ssh: Flags [S], seq 1547228218, win 65535, options [mss 1460,sackOK,eol], length 0 10:26:52.773759 IP ei.lan.55742 > 192.168.179.15.ssh: Flags [S], seq 1547228218, win 65535, options [mss 1460,sackOK,eol], length 0 Et cetera. No replies. This goes for all tcp ports, but ping works. nmap from another host says: # nmap soekris Starting Nmap 4.85BETA7 ( http://nmap.org ) at 2009-09-08 13:31 CEST All 1000 scanned ports on 192.168.179.15 are filtered MAC Address: 00:00:24:CB:93:28 (Connect AS) Nmap done: 1 IP address (1 host up) scanned in 21.67 seconds Anyone else seeing this? Ruben kernel config is below. include GENERIC cpu I486_CPU cpu I586_CPU ident SOEKRIS machine i386 options CPU_ELAN options CPU_SOEKRIS options HZ=150 #options CPU_ELAN_XTAL options CPU_GEODE _______________________________________________ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"