From owner-freebsd-pf@FreeBSD.ORG Thu Jun 28 19:47:24 2007 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 3478D16A46D for ; Thu, 28 Jun 2007 19:47:24 +0000 (UTC) (envelope-from koji@registro.br) Received: from clone.registro.br (clone.registro.br [200.160.2.4]) by mx1.freebsd.org (Postfix) with ESMTP id ECAD713C455 for ; Thu, 28 Jun 2007 19:47:23 +0000 (UTC) (envelope-from koji@registro.br) Received: by clone.registro.br (Postfix, from userid 1002) id BBEC69583A; Thu, 28 Jun 2007 16:47:22 -0300 (BRT) Date: Thu, 28 Jun 2007 16:47:22 -0300 From: Hugo Koji Kobayashi To: Max Laier Message-ID: <20070628194722.GB63196@registro.br> References: <20070528224225.GC40678@registro.br> <200706281919.41777.max@love2party.net> <20070628180741.GA7323@registro.br> <200706282134.26140.max@love2party.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200706282134.26140.max@love2party.net> User-Agent: Mutt/1.4.2.2i X-Organization: Registro.br X-URL: http://registro.br/ X-Operating-System: FreeBSD Cc: freebsd-pf@freebsd.org Subject: Re: udp fragmentation X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Jun 2007 19:47:24 -0000 On Thu, Jun 28, 2007 at 09:34:18PM +0200, Max Laier wrote: > On Thursday 28 June 2007, Hugo Koji Kobayashi wrote: > > On Thu, Jun 28, 2007 at 07:19:25PM +0200, Max Laier wrote: > > dig @a.ns.se se dnskey +dnssec +bufsize=4500 > > > > This query is supposed to receive a DNS answer of more than 4KB. > > See the attached script I did just now. > > The only thing common about your setup seems to be the bge(4) NIC. Can > you try disabling hardware checksumming (ifconfig -txcsum -rxcsum)? My > test is over a hardware checksumming fxp(4) card, though. It worked when disabling hardware checksumming: fbsd7# ifconfig bge0 bge0: flags=8843 metric 0 mtu 1500 options=9b ether 00:12:3f:15:36:7d inet 200.160.3.113 netmask 0xffffffc0 broadcast 200.160.3.127 media: Ethernet autoselect (1000baseTX ) status: active fbsd7# dig @a.ns.se se dnskey +dnssec +bufsize=4500 ; <<>> DiG 9.4.1 <<>> @a.ns.se se dnskey +dnssec +bufsize=4500 ; (2 servers found) ;; global options: printcmd ;; connection timed out; no servers could be reached fbsd7# ifconfig bge0 -txcsum fbsd7# ifconfig bge0 bge0: flags=8843 metric 0 mtu 1500 options=98 ether 00:12:3f:15:36:7d inet 200.160.3.113 netmask 0xffffffc0 broadcast 200.160.3.127 media: Ethernet autoselect (1000baseTX ) status: active fbsd7# dig @a.ns.se se dnskey +dnssec +bufsize=4500 | tail -5 ;; Query time: 243 msec ;; SERVER: 192.36.144.107#53(192.36.144.107) ;; WHEN: Thu Jun 28 16:46:49 2007 ;; MSG SIZE rcvd: 4088