From owner-freebsd-net@FreeBSD.ORG Sat Feb 5 00:42:59 2011 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C5282106566C for ; Sat, 5 Feb 2011 00:42:59 +0000 (UTC) (envelope-from julian@freebsd.org) Received: from vps1.elischer.org (vps1.elischer.org [204.109.63.16]) by mx1.freebsd.org (Postfix) with ESMTP id 995268FC16 for ; Sat, 5 Feb 2011 00:42:59 +0000 (UTC) Received: from julian-mac.elischer.org (home-nat.elischer.org [67.100.89.137]) (authenticated bits=0) by vps1.elischer.org (8.14.4/8.14.4) with ESMTP id p150gr49026770 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO); Fri, 4 Feb 2011 16:42:58 -0800 (PST) (envelope-from julian@freebsd.org) Message-ID: <4D4C9D10.4040308@freebsd.org> Date: Fri, 04 Feb 2011 16:42:56 -0800 From: Julian Elischer User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.4; en-US; rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7 MIME-Version: 1.0 To: Prabhu Hariharan References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org Subject: Re: Connections not purged on address deletion X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Feb 2011 00:42:59 -0000 On 2/4/11 4:03 PM, Prabhu Hariharan wrote: > Hi, > > When I delete an IP-address from an interface, the TCP (and other) > connections using that local IP-address are not getting purged. The telnet > or ssh sessions on the other end just get hung, as FreeBSD address-deletion > doesn't handle this situation and fails to call pfctlinput() to notify > protocols on this event. The TCP connections simply linger in the system > and takes it due course on TCP timers to free those inpcbs. > > tcp4 0 0 30.30.30.31.22 30.30.30.30.58796 > ESTABLISHED > > Is this by design? Or any significance on relying on applications > intelligently to do timeouts, without a notification from network layer? theoretically if you move the address to another interface it should start working again assuming the routing is correct. It's mostly by design. If you want to get rid of them you might try to add a firewall rule to send them resets. I don't know what other systems do. > Thanks, > Prabhu H > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" >