Ermal Luçi skrev:
On Tue, May 26, 2009 at 1:00 PM, Karsten Schmidt <[email protected]> wrote:
The following reply was made to PR kern/132176; it has been noted by GNATS.
From: Karsten Schmidt <[email protected]>
To: [email protected], [email protected]
Cc:
Subject: Re: kern/132176: [pf] pf stalls connection when using route-to
[regression]
Date: Tue, 26 May 2009 12:40:52 +0200
I have the same error on a 7.2 box with a bce device and vlans
#pf.conf
# send all packets from x.x.x.128/26 to nonlocal addresses through x.x.x.129
pass out quick route-to ( bce0.11 x.x.x.129 ) from x.x.x.128/26 to
!x.x.x.128/26 no state
#default gateway
91.208.16.1
#ifconfig
bce0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4>
ether 00:1f:29:06:85:28
inet x.x.x.125 netmask 0xffffff80 broadcast x.x.x.127
media: Ethernet autoselect (1000baseTX <full-duplex>)
status: active
bce0.11: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
1500
options=3<RXCSUM,TXCSUM>
ether 00:1f:29:06:85:28
inet x.x.x.140 netmask 0xffffffc0 broadcast x.x.x.191
media: Ethernet autoselect (1000baseTX <full-duplex>)
status: active
vlan: 11 parent interface: bce0
--
Can you show your complete ruleset?
After making a simple setup with no vlans, and only one ip on the bce0
interface i tried a ruleset with only one rule.
#pass out route-to ( bce0 $defaultgate ) from $localip to any no state
Where $defaultgate is the gateway used without the rule too, and
$localip is the only ip on the bce0 interface
This made scp transfers stall to a near halt too.
Trying different options it seems disabling TSO on bce0 works.
hw.bce.tso_enable=0 in loader.conf or simply ifconfig bce0 -tso makes
the scp transfers run at full speed.
Checking with 7.1-RELEASE and 7.0-RELEASE-p4 its the same behavior, so i
guess its not the samme error as kern/132176
--
Karsten
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[email protected]"
