On 09/12/16(Fri) 19:42, Erik Lax wrote: > Hi, > > In previous OpenBSD versions (5.9 and eariler) it was possible to do > proxy-arp with the npppd server if the proxy-arp was setup before the > npppd connection was made. As of 6.0 (and todays snapshots) proxy arp > and npppd (tun interfaces) seems to be broken. > > The behavior is now as such; > > - if an proxy arp entry exists (on a given interface), then incoming > packets will be sent out again on the same interface (instead of > forwarded to the tun interface) > > Setup. > > 1. Adding the proxy-arp entry 10.2.50.123 (the npppd/tun0 client ip) > > arp -s 10.2.50.123 00:50:51:b2:e4:c1 permanent pub > > 2. Connect the client, send ping to host on em0, incoming icmp replys > are sent out on em0 again instead of tun0
Could you include the output of "netstat -rnf inet" at this point? > A quirk? > > If the arp entry is deleted (arp -d 10.2.50.124) on the openbsd host, it > starts to work temporarily (the packet is forwarded to the tun > interface) but only because the remote host has an arp cache. Could you include the same output at this point? > Is there an other way of doing this? There's a regression somewhere, thanks for reporting it. a dmesg would also help.