From nobody Mon Jun 27 12:41:08 2022 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 8C6EB8716D7 for ; Mon, 27 Jun 2022 12:41:21 +0000 (UTC) (envelope-from zarychtam@plan-b.pwste.edu.pl) Received: from plan-b.pwste.edu.pl (plan-b.pwste.edu.pl [IPv6:2001:678:618::40]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "plan-b.pwste.edu.pl", Issuer "GEANT OV RSA CA 4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4LWnQm3HRpz3RLV for ; Mon, 27 Jun 2022 12:41:20 +0000 (UTC) (envelope-from zarychtam@plan-b.pwste.edu.pl) Received: from [IPV6:2a02:22e0:cf00:1ff:4da7:d864:2800:e0a2] (mzar@[IPv6:2a02:22e0:cf00:1ff:4da7:d864:2800:e0a2]) (authenticated bits=0) by plan-b.pwste.edu.pl (8.17.1/8.17.1) with ESMTPSA id 25RCf9Ei095884 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NO); Mon, 27 Jun 2022 14:41:09 +0200 (CEST) (envelope-from zarychtam@plan-b.pwste.edu.pl) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=plan-b.pwste.edu.pl; s=plan-b-mailer; t=1656333670; bh=AML6p1maLLeocwK3M1knDrfpOlEznGf8lJYY4ncU85o=; h=Date:To:References:From:Subject:In-Reply-To; b=wlYyAE6OL8+4qu7QYENY4d5k94VjvlgZRA6s3LbrbPUg+uk9TrTx4Cou5zhqTWjZ5 SsVj3r7dzTddzxuuXr6O3ggO6XC3iTnCmIFUSzjAs1zK4v3+betndheljbWqgkPllJ XWRdnneE/8JwzmMxBrno8aRZ+OUlDlAK1fp4cKkStY2/VSYUFwPE3vE9jMi1ulmLcn cymwzBfysM3jtftBI0AE/lwGFAEv5jwHlGsMtNMhnqCAo6EMnVWtzfeYhc+1n8FLA1 r/tg0iiiXEiVVQvdkSd7oaT28ig3unAyS7+sHyOStJP2d3AJslQ04ZMR7RD10Q26A4 +ANllAKdAWkiQ== Message-ID: <6e6d272a-0954-1fba-c0eb-14480d858a37@plan-b.pwste.edu.pl> Date: Mon, 27 Jun 2022 14:41:08 +0200 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:91.0) Gecko/20100101 Thunderbird/91.10.0 Content-Language: en-US To: Dave Cottlehuber , freebsd-net References: From: Marek Zarychta Subject: Re: missing SYN/ACK for inbound TCP solved by altering broadcast address - why? In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------8WA2AoS49icHEHbcOjUIm8Tz" X-Rspamd-Queue-Id: 4LWnQm3HRpz3RLV X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=plan-b.pwste.edu.pl header.s=plan-b-mailer header.b=wlYyAE6O; dmarc=pass (policy=none) header.from=plan-b.pwste.edu.pl; spf=none (mx1.freebsd.org: domain of zarychtam@plan-b.pwste.edu.pl has no SPF policy when checking 2001:678:618::40) smtp.mailfrom=zarychtam@plan-b.pwste.edu.pl X-Spamd-Result: default: False [-4.79 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[plan-b.pwste.edu.pl:s=plan-b-mailer]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; R_SPF_NA(0.00)[no SPF record]; NEURAL_HAM_MEDIUM(-0.99)[-0.991]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,multipart/mixed,text/plain]; HAS_ATTACHMENT(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[plan-b.pwste.edu.pl:+]; MIME_BASE64_TEXT(0.10)[]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-1.00)[-1.000]; DMARC_POLICY_ALLOW(-0.50)[plan-b.pwste.edu.pl,none]; MLMMJ_DEST(0.00)[freebsd-net]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~]; SUBJECT_ENDS_QUESTION(1.00)[]; ASN(0.00)[asn:206006, ipnet:2001:678:618::/48, country:PL]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[] X-ThisMailContainsUnwantedMimeParts: N This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------8WA2AoS49icHEHbcOjUIm8Tz Content-Type: multipart/mixed; boundary="------------Pjddun6njkpcDpiM8TWssOT7"; protected-headers="v1" From: Marek Zarychta To: Dave Cottlehuber , freebsd-net Message-ID: <6e6d272a-0954-1fba-c0eb-14480d858a37@plan-b.pwste.edu.pl> Subject: Re: missing SYN/ACK for inbound TCP solved by altering broadcast address - why? References: In-Reply-To: --------------Pjddun6njkpcDpiM8TWssOT7 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 VyBkbml1IDI3LjA2LjIwMjIgb8KgMTM6NDQsIERhdmUgQ290dGxlaHViZXIgcGlzemU6DQo+ IEkndmUgZm91bmQgYSB3b3JrYXJvdW5kIGZvciB0aGlzIGlzc3VlLCBidXQgZG9uJ3QgdW5k ZXJzdGFuZCB3aHkgdGhpcw0KPiBvY2N1cnMuIFJlYWRpbmcgUkZDMTEyMiBoYXMgbGVmdCBt ZSBub25lIHRoZSB3aXNlci4gV2hhdCBhbSBJIG1pc3Npbmc/DQo+IElzIHRoaXMgYSBMaW51 eGlzbSBvciBzaW1wbGUgYSBzdGFuZGFyZGlzYXRpb24gbG9vcGhvbGU/DQoNCkl0IGhhcyBi ZWVuIHN0YW5kYXJkaXplZCBpbiBSRkMzMDIxIG92ZXIgdHdlbnR5IHllYXJzIGFnby4gRnJl ZUJTRCANCmlmY29uZmlnKDgpIHN1cHBvcnRzIC8zMSBuZXRtYXNrIGZvciBhIGxvbmcgdGlt ZSBhbmQgdGhlIGJyb2FkY2FzdCANCmFkZHJlc3MgaXMgY29ycmVjdGx5IGFzc2lnbmVkIGlu IHRoaXMgY2FzZSAoMjU1LjI1NS4yNTUuMjU1KS4gRWl0aGVyIA0KZGhjcC1vcHRpb25zKDUp ICJvcHRpb24gYnJvYWRjYXN0LWFkZHJlc3MiIGlzIG1pc3Npbmcgb24gdGhlIERIQ1Agc2Vy dmVyIA0Kb3Igb3VyIGRoY2xpZW50KDgpIGlzIG1pc2JlaGF2aW5nIG9yIG1heWJlIHRoZSBM aW51eCBjbGllbnQgaXMgYmV0dGVyIGluIA0KZmlndXJpbmcgb3V0IHRoZSByaWdodCBicm9h ZGNhc3QgYWRkcmVzcy4NCg0KPiANCj4gIyMgUHJvYmxlbQ0KPiANCj4gLSBvbiAxMy4xLVIs IGRoY2xpZW50LXNldCBjb25maWcgd29ya3MgZm9yIGFsbCBVRFAsICYgb3V0Ym91bmQgVENQ DQo+IC0gYnV0IGluYm91bmQgVENQIGNvbm5lY3Rpb25zIHNlbmQgbm8gU1lOL0FDSyBhdCBh bGwgYmFjaw0KPiAtIG9uIExpbnV4IFVidW50dSAyMi4wNCAmIG90aGVycywgdGhlIERIQ1Ag c3VwcGxpZWQgSVAgY29uZmlnDQo+ICAgIHdvcmtzIGFzIGV4cGVjdGVkDQo+IA0KPiBmYWls aW5nIEZyZWVCU0QgY29uZmlnIGZyb20gZGhjbGllbnQ6DQo+ICAgIGluZXQgMTQ3Ljc1Ljkz LjYxIG5ldG1hc2sgMHhmZmZmZmZmZSBicm9hZGNhc3QgMTQ3Ljc1LjkzLjYwDQo+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXl5eXl5eXl5e Xl5eDQo+IA0KPiB3b3JraW5nIExpbnV4IGNvbmZpZyAobm90ZSBicm9hZGNhc3QpDQo+ICAg IGluZXQgMTQ3Ljc1LjkzLjYxIG5ldG1hc2sgMHhmZmZmZmZmZSBicm9hZGNhc3QgMjU1LjI1 NS4yNTUuMjU0DQo+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgXl5eXl5eXl5eXl5eXl5eDQo+IA0KPiAtIGZ1bGwgZGV0YWlscyBiZWxvdyAo ZGhjcCBsZWFzZSwgaWZjb25maWdzIGV0YykNCj4gDQo+IEkgd29ya2VkIGFyb3VuZCB0aGlz IGJ5IGZvcmNpbmcgYnJvYWRjYXN0LWFkZHJlc3MgaW4gZGhjbGllbnQuY29uZjoNCj4gDQo+ ICMjIC9ldGMvZGhjbGllbnQuY29uZg0KPiBpbnRlcmZhY2UgImljZTAiIHsNCj4gICAgc3Vw ZXJzZWRlIGJyb2FkY2FzdC1hZGRyZXNzIDI1NS4yNTUuMjU1LjI1NTsNCj4gfQ0KPiAjIHJl cGVhdCBmb3Igb3RoZXIgaWZhY2VzIGFzIHJlcXVpcmVkDQo+IA0KPiBXaGljaCBpcyB+b2t+ IGZvciB0aGUgbW9tZW50LCBidXQgSSdkIGxpa2UgdG8gdW5kZXJzdGFuZCB3aHkgdGhpcw0K PiBvY2N1cnMsIGFuZCBmaXggaXQgcHJvcGVybHkuIEVpdGhlciBhdCBESENQRCBlbmQsIG9y IEZyZWVCU0QNCj4gY29uZmlnLg0KPiANCj4gDQo+IA0KPiAjIEZ1cnRoZXIgZGV0YWlscw0K PiANCj4gLSBVYnVudHUgMjIuMDQgZnJvbSB2ZW5kb3INCj4gLSBGcmVlQlNEIDEzLjEtUkVM RUFTRSBhbWQ2NCB2YW5pbGxhIGluc3RhbGwNCj4gLSA0eCBpY2UoNCkgTklDcyAoSW50ZWwg RTgxMCkgYW5kIDJ4ICh1bnVzZWQpIGl4IChpZ3hiZSkNCj4gLSAyeCBvZiB0aGUgaWNlKDQp IGFyZSBib25kZWQgbGluayBhZ2dyZWdhdGlvbg0KPiAtIGRoY2xpZW50IG9ubHkgdXNlZCB0 byBhdHRhY2ggdG8gMSBuaWMsIGlnbm9yaW5nIEZyZWVCU0Qgc2lkZSBvZiBib25kaW5nDQo+ IA0KPiANCj4gIyMgTGludXggaXAgYWRkcg0KPiANCj4gIyBpcCBhZGRyDQo+IDg6IGJvbmQw OiA8QlJPQURDQVNULE1VTFRJQ0FTVCxNQVNURVIsVVAsTE9XRVJfVVA+IG10dSAxNTAwIHFk aXNjIG5vcXVldWUgc3RhdGUgVVAgZ3JvdXAgZGVmYXVsdCBxbGVuIDEwMDANCj4gICAgICBs aW5rL2V0aGVyIGI0Ojk2OjkxOmQ5Ojk5OjIwIGJyZCBmZjpmZjpmZjpmZjpmZjpmZg0KPiAg ICAgIGluZXQgMTQ3Ljc1LjkyLjE4Ny8zMSBicmQgMjU1LjI1NS4yNTUuMjU1IHNjb3BlIGds b2JhbCBib25kMA0KPiAuLi4NCj4gDQo+ICMjIEZyZWVCU0QgaWZjb25maWcNCj4gDQo+ICMg aWZjb25maWcgaWNlMA0KPiBpY2UwOiBmbGFncz04ODYzPFVQLEJST0FEQ0FTVCxSVU5OSU5H LFNJTVBMRVgsTVVMVElDQVNUPiBtZXRyaWMgMCBtdHUgMTUwMA0KPiBvcHRpb25zPTRlMTA0 Mzg8VkxBTl9NVFUsVkxBTl9IV1RBR0dJTkcsSlVNQk9fTVRVLExSTyxWTEFOX0hXRklMVEVS LFJYQ1NVTV9JUFY2LFRYQ1NVTV9JUFY2LE5PTUFQPg0KPiAgICAgICAgICBldGhlciBiNDo5 Njo5MTpkOTo5Yjo0OA0KPiAgICAgICAgICBpbmV0IDE0Ny43NS45My42MSBuZXRtYXNrIDB4 ZmZmZmZmZmUgYnJvYWRjYXN0IDE0Ny43NS45My42MA0KPiAgICAgICAgICBtZWRpYTogRXRo ZXJuZXQgYXV0b3NlbGVjdCAoMjVHLUFVSSA8ZnVsbC1kdXBsZXg+KQ0KPiAgICAgICAgICBz dGF0dXM6IGFjdGl2ZQ0KPiAgICAgICAgICBuZDYgb3B0aW9ucz0yOTxQRVJGT1JNTlVELElG RElTQUJMRUQsQVVUT19MSU5LTE9DQUw+DQo+IC4uLg0KPiByb290QG1ldGFsQlNEOn4gIyBu ZXRzdGF0IC00cm4NCj4gUm91dGluZyB0YWJsZXMNCj4gDQo+IEludGVybmV0Og0KPiBEZXN0 aW5hdGlvbiAgICAgICAgR2F0ZXdheSAgICAgICAgICAgIEZsYWdzICAgICBOZXRpZiBFeHBp cmUNCj4gZGVmYXVsdCAgICAgICAgICAgIDE0Ny43NS45My42MCAgICAgICBVR1MgICAgICAg IGljZTANCj4gMTI3LjAuMC4xICAgICAgICAgIGxpbmsjNyAgICAgICAgICAgICBVSCAgICAg ICAgICBsbzANCj4gMTQ3Ljc1LjkzLjYwLzMxICAgIGxpbmsjMyAgICAgICAgICAgICBVICAg ICAgICAgIGljZTANCj4gMTQ3Ljc1LjkzLjYxICAgICAgIGxpbmsjMyAgICAgICAgICAgICBV SFMgICAgICAgICBsbzANCj4gDQo+IHJvb3RAbWV0YWxCU0Q6fiAjIGNhdCAvdmFyL2RiL2Ro Y2xpZW50LmxlYXNlcy5pY2UwDQo+IA0KPiAtIG5vdGUgbm8gYnJvYWRjYXN0LWFkZHJlc3Mg cHJvdmlkZWQNCj4gLSBMaW51eCAmIEZyZWVCU0QgZXZpZGVudGx5IGRlcml2ZSBpdCBkaWZm ZXJlbnRseQ0KPiANCj4gbGVhc2Ugew0KPiAgICBpbnRlcmZhY2UgImljZTAiOw0KPiAgICBm aXhlZC1hZGRyZXNzIDE0Ny43NS45My42MTsNCj4gICAgb3B0aW9uIHN1Ym5ldC1tYXNrIDI1 NS4yNTUuMjU1LjI1NDsNCj4gICAgb3B0aW9uIHJvdXRlcnMgMTQ3Ljc1LjkzLjYwOw0KPiAg ICBvcHRpb24gZG9tYWluLW5hbWUtc2VydmVycyAxNDcuNzUuMjA3LjIwNywxNDcuNzUuMjA3 LjIwODsNCj4gICAgb3B0aW9uIGhvc3QtbmFtZSAiaW50cmFuc2lnZW50MDkiOw0KPiAgICBv cHRpb24gZGhjcC1sZWFzZS10aW1lIDE3MjgwMDsNCj4gICAgb3B0aW9uIGRoY3AtbWVzc2Fn ZS10eXBlIDU7DQo+ICAgIG9wdGlvbiBkaGNwLXNlcnZlci1pZGVudGlmaWVyIDEzOS4xNzgu NzguMTQwOw0KPiAgICByZW5ldyAxIDIwMjIvNi8yNyAxODo0MDowNjsNCj4gICAgcmViaW5k IDIgMjAyMi82LzI4IDEyOjQwOjA2Ow0KPiAgICBleHBpcmUgMiAyMDIyLzYvMjggMTg6NDA6 MDY7DQo+IH0NCj4gDQo+IEErDQo+IERhdmUNCj4gDQoNCg0KLS0gDQpNYXJlayBaYXJ5Y2h0 YQ0K --------------Pjddun6njkpcDpiM8TWssOT7-- --------------8WA2AoS49icHEHbcOjUIm8Tz Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsB5BAABCAAjFiEEnjwyTmqn2oNX6C8qHZW8vIFppoIFAmK5pWQFAwAAAAAACgkQHZW8vIFppoLW dQf8CYfU4pD8BOcF1h8VSOpiyWFMKcKDJTmjnlUDYc4EiSGz4pfjG+Gx1juU1CUCniqD1zaNRpLn QF1Uq0C9gzQVYtmnRL7brDeDRA0TlDGvKJW2YKJOpOgUcvgTJNtKugD7U8kkG5HTPiHyXB0kGdJk 5RDcYCkZNkpMxd3K0Vk9Q/wX35jlsalcaYxqKX102QpmrUn/o4FXh2Kmg3lzJvKwMFsHK7VMpu9R I/XHwknh02GTRtS5lOx3UllEwAQ0opzTH4Z0yI+dV9J9BJfnYUyvGzAgBW7zcoK8l6Lv0JzGlzCX fEl6N6JVgoMmpoQZSE2ZwvDjcacmA8lgXqcv+1lkJA== =GlUS -----END PGP SIGNATURE----- --------------8WA2AoS49icHEHbcOjUIm8Tz--