From owner-freebsd-pf@FreeBSD.ORG Tue Mar 20 19:26:22 2007 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id A577316A401 for ; Tue, 20 Mar 2007 19:26:22 +0000 (UTC) (envelope-from jsimola@gmail.com) Received: from wr-out-0506.google.com (wr-out-0506.google.com [64.233.184.227]) by mx1.freebsd.org (Postfix) with ESMTP id 636D113C448 for ; Tue, 20 Mar 2007 19:26:22 +0000 (UTC) (envelope-from jsimola@gmail.com) Received: by wr-out-0506.google.com with SMTP id 36so2088653wra for ; Tue, 20 Mar 2007 12:26:21 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=t4/RGA/ZWIx1St7COnty6Xo4qAWMooQ0/h8axEBckvivzdYL+ReuyQjVhZaeI2EvQT+iRb8o2hd8fqHXz/aESHvB80yfYa0x3w+IxQKJ0WCf9VamIyGPB42ni2TPnKxxFYcq43zZQdD0aq0S4ITzYhQaBN1ljzpFoGwIUrHDVAo= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=pY3dNn29/xR8d3raUT+eN/zTwOLk4vXFUjnXSuQrz7ioMaitn3j/P3cwPKIuf27LGal0CarqO0UCqKzhAm71zyCUgQe3eLuDHzRZhlTxT62BwqHcLNwJMGZ+1Ml6pZwTOBun6uGZPfZ5G1eOfLPzQEQ9iKsHkPPJw1ThZL9NSNc= Received: by 10.90.90.16 with SMTP id n16mr1303862agb.1174417042450; Tue, 20 Mar 2007 11:57:22 -0700 (PDT) Received: by 10.114.152.19 with HTTP; Tue, 20 Mar 2007 11:57:22 -0700 (PDT) Message-ID: <8eea04080703201157s6939c8eape3fb1cfec1433464@mail.gmail.com> Date: Tue, 20 Mar 2007 11:57:22 -0700 From: "Jon Simola" To: "WAYNE KING" In-Reply-To: <2a1c4c62a19f27.2a19f272a1c4c6@osu.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <2a1c4c62a19f27.2a19f272a1c4c6@osu.edu> Cc: freebsd-pf@freebsd.org Subject: Re: problem with linux kernel 2.16.18.2 and packet filter X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Mar 2007 19:26:22 -0000 On 3/20/07, WAYNE KING wrote: > Hello list, My subnet at Ohio State is running a BSD firewall with packet filter. > It works great, but I just encountered a weird problem with the linux 2.16.18.2 > kernel and packet filter. > Any quick insights just for my own education? A quick search with Google turned up a great explanation by Daniel Hartmeier: http://mail-index.netbsd.org/tech-net/2006/07/12/0000.html As well as some evidence that this isn't a new problem: http://archives.neohapsis.com/archives/openbsd/2004-09/0703.html I would have to agree with Max's suggestion to check for proper "flags S/SA" on the rules. OpenBSD recently made that the default for this reason. -- Jon