From owner-freebsd-net@freebsd.org Sun Nov 22 19:08:12 2020 Return-Path: Delivered-To: freebsd-net@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 33FA9471848; Sun, 22 Nov 2020 19:08:12 +0000 (UTC) (envelope-from trashcan@ellael.org) Received: from mx1.enfer-du-nord.net (mx1.enfer-du-nord.net [91.121.41.56]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4CfKYl1y2qz3rVS; Sun, 22 Nov 2020 19:08:11 +0000 (UTC) (envelope-from trashcan@ellael.org) Received: from [IPv6:2003:fb:4f0f:4a01:384c:e785:7e69:e5ee] (p200300fB4f0F4a01384cE7857e69e5EE.dip0.t-ipconnect.de [IPv6:2003:fb:4f0f:4a01:384c:e785:7e69:e5ee]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.enfer-du-nord.net (Postfix) with ESMTPSA id 4CfKYj3ht7zG6M; Sun, 22 Nov 2020 20:08:09 +0100 (CET) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Subject: Re: 12.2-STABLE: Commit 367740 breaks IMAP/SMTP server authentication From: Michael Grimm In-Reply-To: <9EED2425-AD5D-4171-97C0-591100FC297D@ellael.org> Date: Sun, 22 Nov 2020 20:08:02 +0100 Cc: gnn@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <9EED2425-AD5D-4171-97C0-591100FC297D@ellael.org> To: freebsd-net@freebsd.org, FreeBSD-STABLE Mailing List X-Mailer: Apple Mail (2.3608.120.23.2.4) X-Rspamd-Queue-Id: 4CfKYl1y2qz3rVS X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=none (mx1.freebsd.org: domain of trashcan@ellael.org has no SPF policy when checking 91.121.41.56) smtp.mailfrom=trashcan@ellael.org X-Spamd-Result: default: False [-1.60 / 15.00]; RCVD_TLS_ALL(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; MV_CASE(0.50)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[ellael.org]; ARC_NA(0.00)[]; TO_DN_SOME(0.00)[]; SPAMHAUS_ZRD(0.00)[91.121.41.56:from:127.0.2.255]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; RBL_DBL_DONT_QUERY_IPS(0.00)[91.121.41.56:from]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-1.000]; AUTH_NA(1.00)[]; R_SPF_NA(0.00)[no SPF record]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:16276, ipnet:91.121.0.0/16, country:FR]; RCVD_COUNT_TWO(0.00)[2]; MAILMAN_DEST(0.00)[freebsd-net,freebsd-stable] X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Nov 2020 19:08:12 -0000 Hi - Michael Grimm wrote: > Well, now I am able to omit this commit, but I would love to know what = is going on, and why this commit may break 'authentication/certificate = exchange/what so ever' of IMAP and SMTP/submission clients running in a = VNET jail ... It just came to my mind, that I had had a strange issue with my setup = almots three years ago: = https://lists.freebsd.org/pipermail/freebsd-net/2018-January/049528.html /boot/loader.conf: # needs to become turned off (LRO) in order to restore tcp = performance within VNET jails: hw.vtnet.lro_disable=3D"1" hw.vtnet.tso_disable=3D"1" That is FYI, only. I have no clue if that's related anyhow. Regards, Michael