From owner-freebsd-current@FreeBSD.ORG Tue May 22 05:04:09 2007 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 2663A16A479 for ; Tue, 22 May 2007 05:04:09 +0000 (UTC) (envelope-from ianf@clue.co.za) Received: from munchkin.clue.co.za (munchkin.clue.co.za [66.219.59.160]) by mx1.freebsd.org (Postfix) with ESMTP id E111013C45B for ; Tue, 22 May 2007 05:04:08 +0000 (UTC) (envelope-from ianf@clue.co.za) DomainKey-Signature: a=rsa-sha1; q=dns; c=simple; s=20070313; d=clue.co.za; h=Received:Received:Received:To:cc:From:Subject:In-Reply-To:X-Attribution:Date:Message-Id; b=c93/Nc95uLPoUkSJMCqkyMSkQPnS0WCl3ueX7v/KPyhFVGiptUwtLMWUIgX0mJ0wSw5p9ZQZORDgyUM2TWQ9z3rhNN63dLVt1TrAwfFgBoBfCZvG6MtWNQHJ0xp6gyfs3vfn9qXcraGM/qxGkNYvm7PUav++Bbd04V2pF2wiBpjwXCGY7SJKgg5jJo0PvIcXsF//IKW1pAaP3Npax1NhJ2YQ1ywbnW72Bget9TkgvBh8p0vFjDA3Jdy28Th3FQ+G; Received: from uucp by munchkin.clue.co.za with local (Exim 4.66) (envelope-from ) id 1HqMXY-0000g2-9b; Tue, 22 May 2007 05:04:08 +0000 Received: from cluetoy.clue.co.za ([10.0.0.19] helo=clue.co.za) by urchin.clue.co.za with esmtpa (Exim 4.66) (envelope-from ) id 1HqMWj-0000m1-1g; Tue, 22 May 2007 05:03:17 +0000 Received: from localhost ([127.0.0.1]) by clue.co.za with esmtp (Exim 4.66 (FreeBSD)) (envelope-from ) id 1HqMWi-0000Tk-2X; Tue, 22 May 2007 07:03:16 +0200 To: Sten Spans From: Ian FREISLICH In-Reply-To: Message from Sten Spans of "Tue, 22 May 2007 00:21:36 +0200." X-Attribution: BOFH Date: Tue, 22 May 2007 07:03:16 +0200 Message-Id: Cc: freebsd-current@freebsd.org Subject: Re: em0 hijacking traffic to port 623 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 May 2007 05:04:09 -0000 Sten Spans wrote: > On Mon, 21 May 2007, Ian FREISLICH wrote: > > > Hi > > > > We've noticed an issue on our firewalls where the first em device > > in the system hijacks inbound port 623 tcp and udp. The OS never > > sees this traffic. Interestingly, em1 and em2 do not appear to be > > afflicted by this problem. Some reading I've done points to a > > similar conclusion: > > > > http://blogs.sun.com/shepler/entry/port_623_or_the_mount > > > > I've looked at the bios, but I can't find any settings that remotely > > hint IPMI or RMCP+ or serial-over-lan. > > > > Does anyone know how I can stop the card or system from stealing > > port 623 in hardware or must I just stop using em0 (and/or Intel NICS)? > > Does "ifconfig em0 promisc" help ? > That fixed firmware related vanishing ipv6 packets on fxp and em. They are already in promiscuous mode due to carp. Ian -- Ian Freislich