Date: Thu, 5 Mar 2009 14:04:29 +0100 (CET) From: "Joost Bekkers" <joost@jodocus.org> To: "Ivan Voras" <ivoras@freebsd.org> Cc: freebsd-net@freebsd.org Subject: Re: IPFW and IPv6 TCP timeout problem Message-ID: <29230.62.12.14.25.1236258269.squirrel@jodocus.org> In-Reply-To: <good54$65u$1@ger.gmane.org> References: <good54$65u$1@ger.gmane.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, March 5, 2009 12:30, Ivan Voras wrote: > Hi, > > It appears that IPFW drops dynamic (state-keeping) rules for idle IPv6 > TCP connections after a short (60 seconds by default) timeout. This of > course creates problems for services like SSH and NFS. I've contacted > Luigi Rizzo about it but he cannot help with the IPv6 part of the ipfw. > His guess is that the part that should send keepalive ACK packets like > ipfw does for IPv4 is broken or nonexistent for IPv6. > > Any takers? Should I file a PR? > > You might want to check if kern/117234 is relevant here. I've got a feeling this is the problem you're seeing. The PR includes a patch, it just needs somebody to commit it. good luck. Joost.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?29230.62.12.14.25.1236258269.squirrel>