RELENG_7: can't connect to Solaris

[Anton Yuzhaninov]

On 25.10.2007 20:59, Mike Silbersack wrote:
> 
> On Thu, 25 Oct 2007, Anton Yuzhaninov wrote:
> 
>>> As silby@ already pointed out to me, try changing TCP_MAX_WINSHIFT in 
>>> src/sys/netinet/tcp.h to 4.
>>>
>>
>> With TCP_MAX_WINSHIFT 4 it works.
> 
> I have a fix for this already in HEAD, I'll merge it to releng_7 tonight.
> 
>> But from other host with RELENG_7 tcp to Solaris work fine with 
>> unmodified kernel:
> 
> Is there a firewall in one path, but not the other?
> 

Yes problem was in firewall, not Solaris/FreeBSD tcp stacks.

On Solaris was used ipfilter 3.4.18, and after 3.4.18 was fixed several bugs, which can cause such problems.
Probably this:

4.1.17 - Released 20 January 2007
....
fix tracking TCP window scaling in the state code

Or some other.

ipfilter rules (with keep state) permit tcp traffic from freebsd7 host, but really some packets was blocked.

Thanks.

-- 
WBR,
  Anton Yuzhaninov