From owner-freebsd-net@FreeBSD.ORG  Thu Sep  2 16:56:47 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B27BB16A4CE
	for <freebsd-net@freebsd.org>; Thu,  2 Sep 2004 16:56:47 +0000 (GMT)
Received: from altair.cifrid.net (altair.cifrid.net [195.136.117.116])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 3857743D2D
	for <freebsd-net@freebsd.org>; Thu,  2 Sep 2004 16:56:47 +0000 (GMT)
	(envelope-from apm@acrux.cifrid.net)
Received: from acrux.cifrid.net ([195.136.117.114]:62419 ident=exim)
	by altair.cifrid.net with esmtp (Exim 4.34)
	id 1C2ute-000Ng1-HZ
	for freebsd-net@freebsd.org; Thu, 02 Sep 2004 18:57:14 +0200
Received: from apm by acrux.cifrid.net with local (Exim 4.34)
	id 1C2ute-000Nfy-CL
	for freebsd-net@freebsd.org; Thu, 02 Sep 2004 18:57:14 +0200
Date: Thu, 2 Sep 2004 18:57:14 +0200
From: Artur Meski <apm@cifrid.net>
To: freebsd-net@freebsd.org
Message-ID: <20040902165714.GA86645@acrux.cifrid.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Sender: Artur Meski <apm@acrux.cifrid.net>
Subject: strange connection attempts with 182.5.5.8.
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Sep 2004 16:56:47 -0000

Pound (http://www.apsis.ch/pound) is a http reverse proxy and
load balancer. While I was playing with it, I ran into a weird thing.

After pound forwards a connection to a backend, something like this occurs
(truss output):

connect(0x3,{ AF_INET 182.5.5.8:49087 },16)      ERR#36 'Operation now in
progress'

Where does 182.5.5.8 come from? No one has ever made any connection
(according to tcpdump) from this address. I installed pound on the
second server and its behaviour is just the same. It happened to me only
on FreeBSD. Tested with different FreeBSD installations.

AOLserver with nsvhr module does very similiar thing, so I assume it's not
pound specific and maybe a FreeBSD bug.

What's going on?

-- 
// WWW: apm.cifrid.net // PGP: finger apm@acrux.cifrid.net //