[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087

--- Comment #17 from g_amanakis at yahoo.com ---
Created attachment 166901
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=166901&action=edit
ipfw.txt

This is the simplified IPFW ruleset I am using. IPSEC is turned off in kernel
compilation. I will use only this from now on in order to have a common basis.
xxx.yyy and aaa.bbb are local networks. All the local clients are on the
xxx.yyy network.

With this I am getting a mixed behaviour. For example my laptop client
(Thinkpad X230 running Archlinux) exhibits the symptoms on some sites (most
notably www.gutefrage.net) when the gateway runs the r295545 kernel (commenting
out ip_tryforward() resolves it). However when the gateway runs the r295264
kernel with net.inet.ip.fastforwarding=1 the archlinux client doesn't exhibit
the symptoms anymore. 

I will test this on HEAD. Is there any special tcpdump command you 'd like me
to run? I will try and get simultaneous dumps from the interfaces involved.

-- 
You are receiving this mail because:
You are on the CC list for the bug.