Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Jan 2002 23:06:52 +0000
From:      AMAKAWA Shuhei <sa264@cam.ac.uk>
To:        "Mario Doria" <madd@tecdigital.net>
Cc:        <questions@freebsd.org>, <ipfilter@cairo.anu.edu.au>
Subject:   Re: IPF Dropping connections in the middle of a transfer
Message-ID:  <E16TsxR-0005N9-00@green.csi.cam.ac.uk>
In-Reply-To: <003b01c1a48e$39fabed0$0a00a8c0@Deathstar>
References:  <003b01c1a48e$39fabed0$0a00a8c0@Deathstar>

next in thread | previous in thread | raw e-mail | index | archive | help
At Wed, 23 Jan 2002 22:18:47 -0600,
Mario Doria wrote:
> 
> Hello,
> 
> I'm looking for some help regarding my IPFilter ruleset, as far as I can
> tell, it looks OK. The problem is that some remote users when transfering
> files with sftp suddenly lose the connection to the server. Other cases are
> where tranfering files via FTP (using windows client leechFTP), the
> connection times out randomly (always before the timeout in leechFTP). On
> both ocations, I haven't been able to reproduce the problem.
> 
> I hope someone can shed some light into this!
> 
> Thanks,
> 
> Mario Doria
> madd@tecdigital.net

I started to see probably the same problem since November 2001 or
something.  I suspect some recent change in the FreeBSD tcp code is
affecting IP Filter's stateful inspection.

sysctl net.inet.tcp.recvspace=32768
mitigates the problem somewhat (default is 65536).

(I didn't look at your rules.)

--
Shuhei

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E16TsxR-0005N9-00>