From owner-freebsd-net@FreeBSD.ORG  Thu Oct 25 22:10:26 2007
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 5165416A468
	for <freebsd-net@freebsd.org>; Thu, 25 Oct 2007 22:10:26 +0000 (UTC)
	(envelope-from citrin@citrin.ru)
Received: from mail.classis.ru (classis.ru [213.248.60.120])
	by mx1.freebsd.org (Postfix) with ESMTP id 0293413C4B0
	for <freebsd-net@freebsd.org>; Thu, 25 Oct 2007 22:10:25 +0000 (UTC)
	(envelope-from citrin@citrin.ru)
Received: from [192.168.1.33] (ppp91-76-239-163.pppoe.mtu-net.ru
	[91.76.239.163])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	(Authenticated sender: citrin@citrin.ru)
	by mail.classis.ru (Postfix) with ESMTP id 8B585B828
	for <freebsd-net@freebsd.org>; Fri, 26 Oct 2007 02:10:24 +0400 (MSD)
Message-ID: <4721144A.5000407@citrin.ru>
Date: Fri, 26 Oct 2007 02:10:18 +0400
From: Anton Yuzhaninov <citrin@citrin.ru>
User-Agent: Thunderbird by compcn
MIME-Version: 1.0
To: freebsd-net@freebsd.org
References: <47206EE2.6030606@citrin.ru>	<3171D7CB-2E63-4FAF-92A9-3907D44AB845@fnop.net>	<4720B3C5.9070806@citrin.ru>
	<20071025125732.Q27636@niwun.pair.com>
In-Reply-To: <20071025125732.Q27636@niwun.pair.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: RELENG_7: can't connect to Solaris
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Oct 2007 22:10:26 -0000

On 25.10.2007 20:59, Mike Silbersack wrote:
> 
> On Thu, 25 Oct 2007, Anton Yuzhaninov wrote:
> 
>>> As silby@ already pointed out to me, try changing TCP_MAX_WINSHIFT in 
>>> src/sys/netinet/tcp.h to 4.
>>>
>>
>> With TCP_MAX_WINSHIFT 4 it works.
> 
> I have a fix for this already in HEAD, I'll merge it to releng_7 tonight.
> 
>> But from other host with RELENG_7 tcp to Solaris work fine with 
>> unmodified kernel:
> 
> Is there a firewall in one path, but not the other?
> 

Yes problem was in firewall, not Solaris/FreeBSD tcp stacks.

On Solaris was used ipfilter 3.4.18, and after 3.4.18 was fixed several bugs, which can cause such problems.
Probably this:

4.1.17 - Released 20 January 2007
....
fix tracking TCP window scaling in the state code

Or some other.

ipfilter rules (with keep state) permit tcp traffic from freebsd7 host, but really some packets was blocked.

Thanks.

-- 
WBR,
  Anton Yuzhaninov