From owner-freebsd-net@FreeBSD.ORG  Thu May 29 05:50:01 2014
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@smarthost.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 37AC0608
 for <freebsd-net@smarthost.ysv.freebsd.org>;
 Thu, 29 May 2014 05:50:01 +0000 (UTC)
Received: from freefall.freebsd.org (freefall.freebsd.org
 [IPv6:2001:1900:2254:206c::16:87])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 230A82F15
 for <freebsd-net@smarthost.ysv.freebsd.org>;
 Thu, 29 May 2014 05:50:01 +0000 (UTC)
Received: from freefall.freebsd.org (localhost [127.0.0.1])
 by freefall.freebsd.org (8.14.8/8.14.8) with ESMTP id s4T5o0lG099400
 for <freebsd-net@freefall.freebsd.org>; Thu, 29 May 2014 05:50:00 GMT
 (envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
 by freefall.freebsd.org (8.14.8/8.14.8/Submit) id s4T5o0vn099387;
 Thu, 29 May 2014 05:50:00 GMT (envelope-from gnats)
Date: Thu, 29 May 2014 05:50:00 GMT
Message-Id: <201405290550.s4T5o0vn099387@freefall.freebsd.org>
To: freebsd-net@FreeBSD.org
Cc: 
From: Eygene Ryabinkin <rea@freebsd.org>
Subject: Re: kern/190102: [tcp] net.inet.tcp.drop_synfin=1 no longer works on
 FreeBSD 10+ [regression]
Reply-To: Eygene Ryabinkin <rea@freebsd.org>
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net/>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 29 May 2014 05:50:01 -0000

The following reply was made to PR kern/190102; it has been noted by GNATS.

From: Eygene Ryabinkin <rea@freebsd.org>
To: FreeBSD GNATS followup <bug-followup@freebsd.org>,
	freebsd-net@freebsd.org
Cc:  
Subject: Re: kern/190102: [tcp] net.inet.tcp.drop_synfin=1 no longer works on
 FreeBSD 10+ [regression]
Date: Thu, 29 May 2014 09:46:45 +0400

 --LXx4g46d83wF7unj
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: inline
 Content-Transfer-Encoding: quoted-printable
 
 I assume that your pf(4) is enabled during these tests, you have
 "scrub" statements in the ruleset and removing "scrub" will restore
 the expected behaviour on 10.x?
 
 I am slightly amused that on 9.x with "scrub" you're getting the
 expected behaviour, because clearing FIN bit for SYN packets was
 the standard behaviour of pf since approximately at least 10 years,
   http://svnweb.freebsd.org/base/vendor-sys/pf/dist/sys/contrib/pf/net/pf_n=
 orm.c?view=3Dmarkup&pathrev=3D126258#l1242
 
 Can you show relevant parts of the pf.conf from both machines
 and output from 'pfctl -s rules' if you are sure that both machines
 are configured identically pf-wise?
 
 Thanks!
 --=20
 Eygene Ryabinkin                                        ,,,^..^,,,
 [ Life's unfair - but root password helps!           | codelabs.ru ]
 [ 82FE 06BC D497 C0DE 49EC  4FF0 16AF 9EAE 8152 ECFB | freebsd.org ]
 
 --LXx4g46d83wF7unj
 Content-Type: application/pgp-signature
 
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.22 (FreeBSD)
 
 iL4EABEKAGYFAlOGycVfFIAAAAAALgAoaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl
 bnBncC5maWZ0aGhvcnNlbWFuLm5ldDgyRkUwNkJDRDQ5N0MwREU0OUVDNEZGMDE2
 QUY5RUFFODE1MkVDRkIACgkQFq+eroFS7Pv7kQD+JjKVNIOqBBGv12DsILxmIr+U
 5A76OhcjmiaO5ricQ2oA/jJy8E/D2nXSdaaAqYsNJaelqQ72Lx927Sxyj50hLDpx
 =2WMS
 -----END PGP SIGNATURE-----
 
 --LXx4g46d83wF7unj--