Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 8 Sep 2009 13:54:59 +0200
From:      Ruben de Groot <mail25@bzerk.org>
To:        current@freebsd.org
Subject:   8.0-BETA2 on soekris discarding packets?
Message-ID:  <20090908115459.GA30570@ei.bzerk.org>

next in thread | raw e-mail | index | archive | help

Hi,

I'm trying 8.0-BETA2 on a 4511 soekris board, but found a problem.

Outgoing networking is fine, but it looks like incoming connections are
silently discarded. No firewall is configured. Here's a tcpdump of normal
outgoing DNS traffic (IP address of the soekris is 192.168.179.15):

listening on sis0, link-type EN10MB (Ethernet), capture size 96 bytes
10:33:50.053875 IP 192.168.179.15.23093 > ei.lan.domain: 45893+ PTR? 255.179.168.192.in-addr.arpa. (46)
10:33:50.055038 IP ei.lan.domain > 192.168.179.15.23093: 45893 NXDomain* 0/1/0 (109)
10:33:50.066917 IP 192.168.179.15.13890 > ei.lan.domain: 45894+ PTR? 9.179.168.192.in-addr.arpa. (44)
10:33:50.067834 IP ei.lan.domain > 192.168.179.15.13890: 45894* 1/1/1 (113)

And here's a dump of an incoming ssh connection:

listening on sis0, link-type EN10MB (Ethernet), capture size 96 bytes
10:26:40.176756 IP ei.lan.55742 > 192.168.179.15.ssh: Flags [S], seq 1547228218, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 1961056657 ecr 0,sackOK,eol], length 0
10:26:43.175176 IP ei.lan.55742 > 192.168.179.15.ssh: Flags [S], seq 1547228218, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 1961059657 ecr 0,sackOK,eol], length 0
10:26:46.374688 IP ei.lan.55742 > 192.168.179.15.ssh: Flags [S], seq 1547228218, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 1961062857 ecr 0,sackOK,eol], length 0
10:26:49.574197 IP ei.lan.55742 > 192.168.179.15.ssh: Flags [S], seq 1547228218, win 65535, options [mss 1460,sackOK,eol], length 0
10:26:52.773759 IP ei.lan.55742 > 192.168.179.15.ssh: Flags [S], seq 1547228218, win 65535, options [mss 1460,sackOK,eol], length 0

Et cetera. No replies. This goes for all tcp ports, but ping works. nmap from another host says:

# nmap soekris

Starting Nmap 4.85BETA7 ( http://nmap.org ) at 2009-09-08 13:31 CEST
All 1000 scanned ports on 192.168.179.15 are filtered
MAC Address: 00:00:24:CB:93:28 (Connect AS)

Nmap done: 1 IP address (1 host up) scanned in 21.67 seconds

Anyone else seeing this?

Ruben

kernel config is below.


include GENERIC

cpu             I486_CPU
cpu             I586_CPU
ident           SOEKRIS

machine i386

options CPU_ELAN
options CPU_SOEKRIS
options HZ=150
#options CPU_ELAN_XTAL
options CPU_GEODE





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090908115459.GA30570>