Re: ipfw reass brakes ipv6 operation

2011-10-28 Thread Sergey Matveychuk

28.10.2011 19:09, Emil Muratov wrote:


Hi all

I've got into some strange behavior with ipv6. Somehow ipfw reassembly
totally brakes it's operation.
As soon as I add a rule "ipfw add 100 reass all from any to any in" all
ipv6 operation is not available any more,
I can only ping6 localhost. Outgoing ipv6 packets are OK, I can see them
via tcpdump on an interface stf0 and after that leaving encapsulated in
ip4 through another interface. But all incoming ipv6 packets are
blackholed. I can see them arriving as an encapsulated payload in ip4
and after that they disappear. I don't know if this a bug or a feature,
using "ipfw add reass ip4 from any to any in" works as a workaround.
Shouldn't reass just pass ipv6 packets intact? Or if it is a feature
than maybe there should be a note in IPFW(8) man page to not to use
reass for anything except ip4?


Yes, reass implemented only for ipv4 and breaks ipv6 packets.
It should be fixed, not documented.
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


ipfw reass brakes ipv6 operation

2011-10-28 Thread Emil Muratov


Hi all

I've got into some strange behavior with ipv6. Somehow ipfw reassembly 
totally brakes it's operation.
As soon as I add a rule "ipfw add 100 reass all from any to any in" all 
ipv6 operation is not available any more,
I can only ping6 localhost. Outgoing ipv6 packets are OK, I can see them 
via tcpdump on an interface stf0 and after that leaving encapsulated in 
ip4 through another interface. But all  incoming ipv6 packets are 
blackholed. I can see them arriving as an encapsulated payload in ip4 
and after that they disappear. I don't know if this a bug or a feature, 
using "ipfw add reass ip4 from any to any in" works as a workaround. 
Shouldn't reass just pass ipv6 packets intact? Or if it is a feature 
than maybe there should be a note in IPFW(8) man page to not to use 
reass for anything except ip4?


Thanks.

___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"