From owner-freebsd-current@FreeBSD.ORG Thu Jun 28 10:50:48 2007 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 7709C16A41F for ; Thu, 28 Jun 2007 10:50:48 +0000 (UTC) (envelope-from rea-fbsd@codelabs.ru) Received: from pobox.codelabs.ru (pobox.codelabs.ru [144.206.177.45]) by mx1.freebsd.org (Postfix) with ESMTP id 2C30913C447 for ; Thu, 28 Jun 2007 10:50:48 +0000 (UTC) (envelope-from rea-fbsd@codelabs.ru) DomainKey-Signature: a=rsa-sha1; q=dns; c=simple; s=one; d=codelabs.ru; h=Received:Date:From:To:Cc:Message-ID:References:MIME-Version:Content-Type:Content-Disposition:In-Reply-To:Sender:X-Spam-Status:Subject; b=FnYICejy4u68/37tRhX7P6+5HVb4+M3+V+ffHznBy56hIVRvMcqKrsrEa8DekTz/9Rojm4MBggrqXJ/jT5Ofjel4Dy9gIoBB6n4xbQ+o1ECj13AZVSCYMjQx0TLM39WeZP0o8eoqff4e7rLJv6o5Vy2vi+4sU2IEZL9YAagES7U=; Received: from void.codelabs.ru (void.codelabs.ru [144.206.177.25]) by pobox.codelabs.ru with esmtpsa (TLSv1:AES256-SHA:256) id 1I3raG-000Dx0-Gn; Thu, 28 Jun 2007 14:50:44 +0400 Date: Thu, 28 Jun 2007 14:50:40 +0400 From: Eygene Ryabinkin To: Steve Kargl Message-ID: <20070628105039.GE11335@void.codelabs.ru> References: <20070628014311.GA50012@troutmask.apl.washington.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=koi8-r Content-Disposition: inline In-Reply-To: <20070628014311.GA50012@troutmask.apl.washington.edu> Sender: rea-fbsd@codelabs.ru X-Spam-Status: No, score=-2.9 required=4.0 tests=ALL_TRUSTED,AWL,BAYES_00 Cc: freebsd-current@freebsd.org Subject: Re: SYNCOOKIE authentication problems X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Jun 2007 10:50:48 -0000 Steve, good day. Wed, Jun 27, 2007 at 06:43:11PM -0700, Steve Kargl wrote: > Any advice on how to isolate or avoid? > > Jun 27 18:31:19 node11 kernel: TCP: [192.168.0.11]:59661 to > [192.168.0.11]:63266 tcpflags 0x10; syncache_expand: Segment failed > SYNCOOKIE authentication, segment rejected (probably spoofed) According to Andre Oppermann, these are harmless: http://lists.freebsd.org/pipermail/freebsd-net/2007-June/014401.html But I am expiriencing some problems related to the other messages like 'tcp_input: Listen socket: Spurious RST, segment rejected'. Though it seems not to be your case, but my problems are documented in the aforementioned thread. Just in case you're curious... -- Eygene