13.0-BETA1: ipfw regression?

Andrey V. Elsukov bu7cher at yandex.ru
Wed Feb 10 12:12:15 UTC 2021


On 10.02.2021 10:40, Dewayne Geraghty wrote:
> Stefan, Would you check that you have net.inet.tcp.always_keepalive=1,
> and perhaps that net.inet.tcp.keepidle and net.inet.tcp.keepintvl are
> reasonable to ensure that the expected keep alives are running.  I don't
> have a FreeBSD 13 to view the defaults, but Helge might be right that
> "it" is already fixed :)
> Regards, Dewayne.

ipfw does send its own keep-alive packets for TCP connections when
state's lifetime expires.
But if remote host doesn't reply this doesn't help.
To check what happened Stefan needs to capture packet dump and inspect it.

-- 
WBR, Andrey V. Elsukov


More information about the freebsd-stable mailing list