From owner-freebsd-ipfw@FreeBSD.ORG Thu Mar 5 16:13:14 2015 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 890BB16E for ; Thu, 5 Mar 2015 16:13:14 +0000 (UTC) Received: from forward4h.cmail.yandex.net (forward4h.cmail.yandex.net [IPv6:2a02:6b8:0:f35::14]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "forwards.mail.yandex.net", Issuer "Certum Level IV CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 33A02EFA for ; Thu, 5 Mar 2015 16:13:14 +0000 (UTC) Received: from smtp2h.mail.yandex.net (smtp2h.mail.yandex.net [84.201.187.145]) by forward4h.cmail.yandex.net (Yandex) with ESMTP id CEA1A160C; Thu, 5 Mar 2015 19:13:09 +0300 (MSK) Received: from smtp2h.mail.yandex.net (localhost [127.0.0.1]) by smtp2h.mail.yandex.net (Yandex) with ESMTP id 763D317080B0; Thu, 5 Mar 2015 19:13:09 +0300 (MSK) Received: from unknown (unknown [2a02:6b8:0:40c:120b:a9ff:fe93:c998]) by smtp2h.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id pefB5DnJyO-D8Y0RhDO; Thu, 5 Mar 2015 19:13:08 +0300 (using TLSv1.2 with cipher AES128-SHA (128/128 bits)) (Client certificate not present) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1425571988; bh=fSZjC0ZMzTrrAwbkAf2g2EdcdlgzuDFNiK2Hrk7z0CQ=; h=Message-ID:Date:From:User-Agent:MIME-Version:To:Subject: References:In-Reply-To:Content-Type; b=mEmI3ocOF/KEO6H+hGoB/06WoeYSGXETDf/dq+kGObP+3JJHrHZW3wmhAGrlqJTae CnHBgSL8cbjho9OhFZhhMLbjubeLgDAgXet87WUYDGZSLLxn5wL7W+f0InrJNlIKLu unMorKnO/4mk4NSrU+ppZBC6tWAZwLqTsCAIbgQw= Authentication-Results: smtp2h.mail.yandex.net; dkim=pass header.i=@yandex.ru Message-ID: <54F8805A.30809@yandex.ru> Date: Thu, 05 Mar 2015 19:12:10 +0300 From: "Andrey V. Elsukov" User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.3.0 MIME-Version: 1.0 To: Emil Muratov , freebsd-ipfw@freebsd.org Subject: Re: "reass all from any to any" kills IPv6 packets References: <54D0A623.6020009@FreeBSD.org> <54F875BD.1040007@hotplug.ru> In-Reply-To: <54F875BD.1040007@hotplug.ru> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="XsjJV3WrPXEKnBKwpLwEjXd6iLU1wnO5J" X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Mar 2015 16:13:14 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --XsjJV3WrPXEKnBKwpLwEjXd6iLU1wnO5J Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 05.03.2015 18:26, Emil Muratov wrote: > On 03.02.2015 13:42, Lev Serebryakov wrote: >> >> Recommended "reass all from any to any in" kills all incoming IPv6 >> packets (at least, packets from 6in4 tunnel). "reass ip4 from any to >> any in" works as expected. >> >> Is it documentation bug or implementation bug? >=20 > Both :) Hit this bug several years ago, seems it is still here AFAIR, I made the patch for such PR, but nobody wanted to test it :) https://people.freebsd.org/~ae/ipfw_ip6reass.diff Probably now I can test it myself a bit later. --=20 WBR, Andrey V. Elsukov --XsjJV3WrPXEKnBKwpLwEjXd6iLU1wnO5J Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCAAGBQJU+IBeAAoJEAHF6gQQyKF6vg8H/0YkpWv8++OsPbs/tjHOPDB7 3p83PJr8ORn2STs1zEtnEMWA2vctL492q3XDf+f9QV8RcEN4G/zPiGpk6m+V3Gui KwKNUDrYA7r4ollQbA0eSWZshm3/ua6FMn0gIfyX72yPge8gIhY/b6kTvltVF2fo AGohrToOv/89OaHPnkDrsAqee7rxwCG7lAsQNRZd3yvv+RZnQfpGZ6OLnrn/u+OY y3I+9nuEedckLNWeJXlDvBKwcJy+L4JyEFEhMYwTBqJRb8ETm76P+OYgWVq1spJO 90+9rIRNi2r4Ec3aB9Ch0ZTfNr6C5kZAwmGcx1ZkjpwEhvlPvSZXLgqed2wVM8U= =L8ag -----END PGP SIGNATURE----- --XsjJV3WrPXEKnBKwpLwEjXd6iLU1wnO5J--