From owner-freebsd-pf@FreeBSD.ORG Thu Jun 28 17:17:43 2007 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 186DB16A46B for ; Thu, 28 Jun 2007 17:17:43 +0000 (UTC) (envelope-from max@love2party.net) Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.126.177]) by mx1.freebsd.org (Postfix) with ESMTP id A253513C4B7 for ; Thu, 28 Jun 2007 17:17:42 +0000 (UTC) (envelope-from max@love2party.net) Received: from [88.64.176.39] (helo=amd64.laiers.local) by mrelayeu.kundenserver.de (node=mrelayeu5) with ESMTP (Nemesis), id 0ML25U-1I3xcg28j8-0006MP; Thu, 28 Jun 2007 19:17:38 +0200 From: Max Laier Organization: FreeBSD To: freebsd-pf@freebsd.org Date: Thu, 28 Jun 2007 19:19:25 +0200 User-Agent: KMail/1.9.6 References: <20070528224225.GC40678@registro.br> <20070604194430.GD21681@registro.br> <200706042200.14860.max@love2party.net> In-Reply-To: <200706042200.14860.max@love2party.net> X-Face: ,,8R(x[kmU]tKN@>gtH1yQE4aslGdu+2]; R]*pL,U>^H?)gW@49@wdJ`H<=?utf-8?q?=25=7D*=5FBD=0A=09U=5For=3D=5CmOZf764=26nYj=3DJYbR1PW0ud?=>|!~,,CPC.1-D$FG@0h3#'5"k{V]a~.<=?utf-8?q?mZ=7D44=23Se=7Em=0A=09Fe=7E=5C=5DX5B=5D=5Fxj?=(ykz9QKMw_l0C2AQ]}Ym8)fU MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart26291597.Bi16EKtsA2"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200706281919.41777.max@love2party.net> X-Provags-ID: V01U2FsdGVkX1+biTj3SZtZH3kf2QOaWaWJTdd5eGDytI5L9I6 TLSbbGzrEHwGsuJCsLijOubTACpOO64P4s5o9qa9QfYJbGCRlV r4HMHxBljWJn2navEZg0kd1pqY2Kt1NbcN93WGpbrI= Cc: Hugo Koji Kobayashi Subject: Re: udp fragmentation X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Jun 2007 17:17:43 -0000 --nextPart26291597.Bi16EKtsA2 Content-Type: text/plain; charset="iso-8859-6" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Monday 04 June 2007, Max Laier wrote: > Hi again, > > On Monday 04 June 2007, Hugo Koji Kobayashi wrote: > > pf is running on the DNS client machine. The DNS server is on a > > completely different network (I don't control this server). The > > client can send the udp request with no problem (it's a small udp > > datagram; less than 512 bytes), the server sends the udp response > > fragmented, but the client can't receive it. > > > > Please, find attached a new test with the requested information. > > > > udp: > > 36 datagrams received > > 2 with bad checksum > > 34 delivered > > 40 datagrams output > > > > > udp: > > 36 datagrams received > > 3 with bad checksum > > 33 delivered > > 41 datagrams output > > Aha! Can you confirm that "bad checksum" increases for every > fragmented packet and I'll look for a cure. I can't reproduce this. What hardware are you running on? (arch, nic=20 (rx/txcsum), non-standart CFLAGS). Just to confirm I'm testing the right=20 cases, my setup looks like: Host1 Host2 Host3 netsend -> pf scrub -> pf scrub -> netreceive Everthing works as expected with various UDP payloads > MTU. =2D-=20 /"\ Best regards, | mlaier@freebsd.org \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | mlaier@EFnet / \ ASCII Ribbon Campaign | Against HTML Mail and News --nextPart26291597.Bi16EKtsA2 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.3 (FreeBSD) iD8DBQBGg+2tXyyEoT62BG0RAonoAJ9CsdYETd3u+u6cyHNidkYl21wCVQCeOATp PbMQx7H+zPX0Dh3+umz8l1I= =PIvy -----END PGP SIGNATURE----- --nextPart26291597.Bi16EKtsA2--