From owner-freebsd-bugs@FreeBSD.ORG Tue Nov 4 08:20:29 2003 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E7E1816A4CE for ; Tue, 4 Nov 2003 08:20:29 -0800 (PST) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2549F43FE9 for ; Tue, 4 Nov 2003 08:20:26 -0800 (PST) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.12.9/8.12.9) with ESMTP id hA4GKQFY023474 for ; Tue, 4 Nov 2003 08:20:26 -0800 (PST) (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.12.9/8.12.9/Submit) id hA4GKQ8C023473; Tue, 4 Nov 2003 08:20:26 -0800 (PST) (envelope-from gnats) Resent-Date: Tue, 4 Nov 2003 08:20:26 -0800 (PST) Resent-Message-Id: <200311041620.hA4GKQ8C023473@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Vlad Manilici Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3538016A4CE for ; Tue, 4 Nov 2003 08:13:54 -0800 (PST) Received: from entropy.tmok.com (entropy.tmok.com [68.15.34.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4289A43FA3 for ; Tue, 4 Nov 2003 08:13:53 -0800 (PST) (envelope-from vman@entropy.tmok.com) Received: from entropy.tmok.com (vman@localhost.tmok.com [127.0.0.1]) by entropy.tmok.com (8.12.10/8.12.5) with ESMTP id hA4GDqab093174 for ; Tue, 4 Nov 2003 11:13:52 -0500 (EST) (envelope-from vman@entropy.tmok.com) Received: (from vman@localhost) by entropy.tmok.com (8.12.10/8.12.5/Submit) id hA4GDq3C093173; Tue, 4 Nov 2003 11:13:52 -0500 (EST) (envelope-from vman) Message-Id: <200311041613.hA4GDq3C093173@entropy.tmok.com> Date: Tue, 4 Nov 2003 11:13:52 -0500 (EST) From: Vlad Manilici To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Subject: kern/58927: Verification of reverse path in ip_fw2.c causes problems X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Vlad Manilici List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Nov 2003 16:20:30 -0000 >Number: 58927 >Category: kern >Synopsis: Verification of reverse path in ip_fw2.c causes problems >Confidential: no >Severity: serious >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Tue Nov 04 08:20:25 PST 2003 >Closed-Date: >Last-Modified: >Originator: Vlad Manilici >Release: FreeBSD 5.1-RELEASE-p10 i386 >Organization: Private >Environment: System: FreeBSD k2 5.1-RELEASE-p10 FreeBSD 5.1-RELEASE-p10 #8: Tue Nov 4 01:26:05 CET 2003 root@k2:/usr/obj/usr/src/sys/K2 i386 >Description: If the direct and reverse route run over different gateways, not response packet is accepted. This may cause problems with certain ISPs (as mine). >How-To-Repeat: Use a host with 2 NICs, and different direct and reverse routes. Traffic will be "swallowed". >Fix: 1. Shorthand: put the interface in promiscuous mode (tcpdump). 2. Elaborate: edit /usr/src/sys/netinet/ip_fw2.c and eliminate verify_rev_path() and all calls to it. ***** Complaint Please restart the Web Interface to GNATS. Users with FreeBSD machines isolated in intranets etc. may have problems with send-pr(1) Cheers, Vlad >Release-Note: >Audit-Trail: >Unformatted: