From owner-freebsd-net@FreeBSD.ORG Wed Apr 2 00:16:58 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 199251065676; Wed, 2 Apr 2008 00:16:58 +0000 (UTC) (envelope-from bms@FreeBSD.org) Received: from out4.smtp.messagingengine.com (out4.smtp.messagingengine.com [66.111.4.28]) by mx1.freebsd.org (Postfix) with ESMTP id E03A68FC1A; Wed, 2 Apr 2008 00:16:57 +0000 (UTC) (envelope-from bms@FreeBSD.org) Received: from compute2.internal (compute2.internal [10.202.2.42]) by out1.messagingengine.com (Postfix) with ESMTP id 47989E4A01; Tue, 1 Apr 2008 20:16:57 -0400 (EDT) Received: from heartbeat1.messagingengine.com ([10.202.2.160]) by compute2.internal (MEProxy); Tue, 01 Apr 2008 20:16:57 -0400 X-Sasl-enc: qJb6xZkjb0xttlvEF81q7u8BG4mCX9y1R6Nj0uihOd4h 1207095416 Received: from empiric.lon.incunabulum.net (82-35-112-254.cable.ubr07.dals.blueyonder.co.uk [82.35.112.254]) by mail.messagingengine.com (Postfix) with ESMTPSA id 5576A104D2; Tue, 1 Apr 2008 20:16:56 -0400 (EDT) Message-ID: <47F2D077.3000503@FreeBSD.org> Date: Wed, 02 Apr 2008 01:16:55 +0100 From: "Bruce M. Simpson" User-Agent: Thunderbird 2.0.0.9 (X11/20080207) MIME-Version: 1.0 To: Andre Oppermann References: <20080401191246.GA1491@fnop.net> <47F29471.10901@freebsd.org> <47F29DE0.6080500@freebsd.org> In-Reply-To: <47F29DE0.6080500@freebsd.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org, rpaulo@freebsd.org, Mark Atkinson Subject: Re: panic: tcp_addoptions: TCP options too long w/ with TCP_SIGNATURE support X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Apr 2008 00:16:58 -0000 Dontcha just hate broken vendor NAT? Yes, it seems reasonable that SACK is the sacrificial victim. Considering folk normally configure TCP-MD5 between routers which are usually directly connected on the same switch, doing away with SACK should be fine. Funny, I was staring at that define moments ago whilst debugging a totally unrelated piece of code in a different language. Good stuff.