recent MFC code to 6-STABLE kills ipv6
Sean McNeil
sean at mcneil.com
Wed Nov 9 19:02:28 PST 2005
On Wed, 2005-11-09 at 21:49 -0500, J.R. Oldroyd wrote:
> Experiencing the problem over here, too.
>
> # ifconfig gif0
> gif0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1280
> tunnel inet 66.171.79.118 --> 64.86.88.116
> inet6 2001:5c0:8fff:fffe::553 --> 2001:5c0:8fff:fffe::552 prefixlen 128
> inet6 fe80::20c:6eff:fe75:69aa%gif0 prefixlen 64 scopeid 0x5
>
> # ping6 2001:5c0:8fff:fffe::553
> PING6(56=40+8+8 bytes) 2001:5c0:8fff:fffe::553 --> 2001:5c0:8fff:fffe::553
> 16 bytes from 2001:5c0:8fff:fffe::553, icmp_seq=0 hlim=64 time=1.658 ms
> 16 bytes from 2001:5c0:8fff:fffe::553, icmp_seq=1 hlim=64 time=0.720 ms
> 16 bytes from 2001:5c0:8fff:fffe::553, icmp_seq=2 hlim=64 time=0.681 ms
> ^C
>
> Ping6 works fine:
>
> However TCP traffic is broke, for example, when I try to telnet to the POP3
> server here, I observe that pf is blocking the server's response packets with
> this error:
>
> # telnet 2001:5c0:8fff:fffe::553 110
> Trying 2001:5c0:8fff:fffe::553...
> ^C
>
> from pflog:
> 21:45:03.080452 rule 0/0(match): block in on gif0: 2001:5c0:8fff:fffe::553.110 > 2001:5c0:8fff:fffe::553.56716: tcp 36 [bad hdr length 8 - too short, < 20]
>
> This did not happen on earlier 6.0-current.
Oh Boy! This is very interesting. I took a look at my ipfw show during
a ping6 and see the problem. The revpath is messed up. I took out my
rule:
add deny all from any to any not verrevpath in via dc0
and ping6 now works.
Thanks for the clue!
This should be fixed. I have no idea why the revpath is no longer
valid.
Cheers,
Sean
More information about the freebsd-current
mailing list