From owner-freebsd-net@FreeBSD.ORG Mon Mar 1 12:57:05 2010 Return-Path: Delivered-To: net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D5FC9106564A for ; Mon, 1 Mar 2010 12:57:05 +0000 (UTC) (envelope-from ticso@cicely7.cicely.de) Received: from raven.bwct.de (raven.bwct.de [85.159.14.73]) by mx1.freebsd.org (Postfix) with ESMTP id 5E69F8FC15 for ; Mon, 1 Mar 2010 12:57:04 +0000 (UTC) Received: from mail.cicely.de ([10.1.1.37]) by raven.bwct.de (8.13.4/8.13.4) with ESMTP id o21CggSQ016531 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Mon, 1 Mar 2010 13:42:46 +0100 (CET) (envelope-from ticso@cicely7.cicely.de) Received: from cicely7.cicely.de (cicely7.cicely.de [10.1.1.9]) by mail.cicely.de (8.14.3/8.14.3) with ESMTP id o21CgeCv091043 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 1 Mar 2010 13:42:40 +0100 (CET) (envelope-from ticso@cicely7.cicely.de) Received: from cicely7.cicely.de (localhost [127.0.0.1]) by cicely7.cicely.de (8.14.2/8.14.2) with ESMTP id o21Cgbx9069698; Mon, 1 Mar 2010 13:42:37 +0100 (CET) (envelope-from ticso@cicely7.cicely.de) Received: (from ticso@localhost) by cicely7.cicely.de (8.14.2/8.14.2/Submit) id o21CgJjq069697; Mon, 1 Mar 2010 13:42:19 +0100 (CET) (envelope-from ticso) Date: Mon, 1 Mar 2010 13:42:19 +0100 From: Bernd Walter To: net@freebsd.org Message-ID: <20100301124219.GK58319@cicely7.cicely.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Operating-System: FreeBSD cicely7.cicely.de 7.0-STABLE i386 User-Agent: Mutt/1.5.11 X-Spam-Status: No, score=-4.4 required=5.0 tests=ALL_TRUSTED=-1.8, BAYES_00=-2.599 autolearn=ham version=3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on spamd.cicely.de Cc: Bernd Walter Subject: IPFW2: IPV6 - Invalid Fragment Header X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: ticso@cicely.de List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Mar 2010 12:57:05 -0000 The droppped packets are simple ping requests send by an amd64 8.0-RC1 (r198183) system. The dropping systems are both ARM - one is 7.0-current and the other is a r204418 current. With net.inet6.ip6.fw.enable=0 those packets are properly answered. Is this a bug in client code or ipfw being oversensible. Those dropped packets work fine if passed. I just do: ping6 2002:559f:e31:1::27 This is what the other side gets: 13:38:25.903467 00:1c:c0:30:16:a1 > 00:0e:42:02:00:42, ethertype IPv6 (0x86dd), length 78: (hlim 64, next-header Fragment (44) payload length: 24) 2002:559f:e31:1::30 > 2002:559f:e31:1::27: frag (0x21fec56e:0|16) ICMP6, echo request, length 16, seq 40 13:38:25.915918 00:1c:c0:94:2c:d7 > 00:0e:42:02:00:42, ethertype IPv4 (0x0800), length 66: (tos 0x10, ttl 64, id 29018, offset 0, flags [DF], proto TCP (6), length 52) 10.1.1.9.49545 > 10.1.1.38.22: Flags [.], cksum 0x8b05 (correct), ack 2112, win 8326, options [nop,nop,TS val 1501749236 ecr 3396017690], length 0 -- B.Walter http://www.bwct.de Modbus/TCP Ethernet I/O Baugruppen, ARM basierte FreeBSD Rechner uvm.