Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 12 Feb 2016 16:49:45 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality
Message-ID:  <bug-207087-8-HlmZ9KRapO@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-207087-8@https.bugs.freebsd.org/bugzilla/>
References:  <bug-207087-8@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087

--- Comment #17 from g_amanakis@yahoo.com ---
Created attachment 166901
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=166901&action=edit
ipfw.txt

This is the simplified IPFW ruleset I am using. IPSEC is turned off in kernel
compilation. I will use only this from now on in order to have a common basis.
xxx.yyy and aaa.bbb are local networks. All the local clients are on the
xxx.yyy network.

With this I am getting a mixed behaviour. For example my laptop client
(Thinkpad X230 running Archlinux) exhibits the symptoms on some sites (most
notably www.gutefrage.net) when the gateway runs the r295545 kernel (commenting
out ip_tryforward() resolves it). However when the gateway runs the r295264
kernel with net.inet.ip.fastforwarding=1 the archlinux client doesn't exhibit
the symptoms anymore. 

I will test this on HEAD. Is there any special tcpdump command you 'd like me
to run? I will try and get simultaneous dumps from the interfaces involved.

-- 
You are receiving this mail because:
You are on the CC list for the bug.


Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-207087-8-HlmZ9KRapO>