Re: udp checksum zero with inet6 rdr-to

2014-07-21 Thread Michael Stone
vio0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 hwfeatures=10VLAN_MTU hardmtu 16000 Can you try a current snapshot? Problem persists on 5.6. Further testing suggests that this may only be happening if the packets exit the firewall via an ip6 tunnel (tun(4) interface).

Re: udp checksum zero with inet6 rdr-to

2014-07-21 Thread Alexander Bluhm
On Mon, Jul 21, 2014 at 04:25:46PM -0400, Michael Stone wrote: Problem persists on 5.6. Further testing suggests that this may only be happening if the packets exit the firewall via an ip6 tunnel (tun(4) interface). I am not seeing the problem between vlans on the same physical network using

Re: udp checksum zero with inet6 rdr-to

2014-07-21 Thread Michael Stone
On Mon, Jul 21, 2014 at 11:05:54PM +0200, Alexander Bluhm wrote: What application do you run on tun? aiccu? Yes, aiccu. Are the packets forwarded or locally generated? Forwarded. Where and how do you measure the checksum 0? At either the firewall as the packets exit, or at the remote

Re: udp checksum zero with inet6 rdr-to

2014-07-19 Thread Alexander Bluhm
On Wed, Jul 16, 2014 at 03:38:36PM -0400, Michael Stone wrote: When using a pf rule to redirect incoming udp traffic to one ipv6 address to a different address, the packet that is sent to originating host has a 0 udp checksum. I'd guess some sort of offload problem, but the

udp checksum zero with inet6 rdr-to

2014-07-16 Thread Michael Stone
Synopsis: udp checksum zero with inet6 rdr-to Category: kernel Environment: System : OpenBSD 5.5 Details : OpenBSD 5.5 (GENERIC.MP) #315: Wed Mar 5 09:37:46 MST 2014 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile

Re: udp checksum zero with inet6 rdr-to

2014-07-16 Thread Michael Stone
On Wed, Jul 16, 2014 at 03:38:36PM -0400, I wrote: When using a pf rule to redirect incoming udp traffic to one ipv6 address to a different address, the packet that is sent to originating host has a 0 udp checksum. I'd guess some sort of offload problem, but the interface isn't claiming