From owner-freebsd-ipfw@FreeBSD.ORG Sun Mar 1 00:26:00 2015 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id E2B143CE for ; Sun, 1 Mar 2015 00:25:59 +0000 (UTC) Received: from asmtp01.netarrest.com (asmtp01.netarrest.com [67.228.24.236]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id BAB48F0D for ; Sun, 1 Mar 2015 00:25:59 +0000 (UTC) Received: from Dell-Admin (p5B05F459.dip0.t-ipconnect.de [91.5.244.89]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by asmtp01.netarrest.com (Postfix) with ESMTPSA id 4087A990088 for ; Sat, 28 Feb 2015 18:25:56 -0600 (CST) Organization: SoundCloud Reply-To: notifications@soundcloudmail.com Message-ID: <72eb76aa847192f3142ad44e0013061d@soundcloudmail.com> From: "SoundCloud Notifications" To: Subject: New message from SoundCloud PR Date: Sun, 1 Mar 2015 01:25:51 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1252" X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Mar 2015 00:26:00 -0000 [letter.png] Hey, [1]SoundCloudPR sent you a message: The SoundCloud Promotional Service offers Artists, DJs, Singers and Managers a simple, cost-effective way to reach targeted followers, sales, comments, plays and downloads on SoundCloud. We target like-minded users who are interested in your new tracks, releases and sets. This means that each new user we will follow, will receive a notification from you (like this message), saying that you have followed him or her. In return, these users will check out your profile, follow you back, play, comment, and download your music. By increasing your visibility on SoundCloud, you also improve your chances of getting noticed by records labels, club owners and talent scouts, who might all be looking for the next big catch. Many of our clients have signed records deals, DJ gigs, or simply found new collaboration partners after using our services. Artists that generate a lot of honest consistent feedbacks and traffic to their profiles are the ones who stand out from the crowd. To check this new service, go directly to the [2]SoundCloud Promotion Page ----- © 2007 - 2015 SoundCloud Ltd. All rights reserved [postman-email-convo-message_sent] [3]Unsubscribe[4] | Manage Notifications | [5]Support | [6]Terms of Use | [7]Community Guidelines | [8]Imprint | [9]Privacy Policy References 1. http://bit.ly/soundcloud-now 2. http://bit.ly/soundcloud-now 3. http://bit.ly/sc-unsubscribe 4. http://soundcloud.com/settings/email 5. http://help.soundcloud.com/ 6. http://soundcloud.com/terms-of-use 7. http://soundcloud.com/community-guidelines 8. http://soundcloud.com/imprint 9. https://soundcloud.com/pages/privacy From owner-freebsd-ipfw@FreeBSD.ORG Thu Mar 5 15:26:57 2015 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C377E33C for ; Thu, 5 Mar 2015 15:26:57 +0000 (UTC) Received: from gate.pik.ru (gate.pik.ru [IPv6:2a03:5a00:31:40::25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7C2FA849 for ; Thu, 5 Mar 2015 15:26:57 +0000 (UTC) Received: from [internal] by relay.pik.ru (Postfix) with ESMTP id 852AF12930 for ; Thu, 5 Mar 2015 18:26:53 +0300 (MSK) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=hotplug.ru; s=mx; t=1425569213; bh=d/6oJU/qjIJvQ2KvEtyasBkKJAdUyo0MbpCgP1CNiFs=; h=Date:From:To:Subject:References:In-Reply-To; b=MYnGBLmfVaM+bOToTa3zJ6GKrmyp8p8aGYJhFfbJsxGT0Umxd+nzYuiGrAXolcJ8A oSS24aPoJSuRo2HNe4unbXA8Z8eR9oAwXbmUn1AtMyzcAHHjl38Uvb/XtCPEO2HMB1 GtQaAsbheDBLtyw0HA+furtX3v2BZPKHMh80plrs= Message-ID: <54F875BD.1040007@hotplug.ru> Date: Thu, 05 Mar 2015 18:26:53 +0300 From: Emil Muratov User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: freebsd-ipfw@freebsd.org Subject: Re: "reass all from any to any" kills IPv6 packets References: <54D0A623.6020009@FreeBSD.org> In-Reply-To: <54D0A623.6020009@FreeBSD.org> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Mar 2015 15:26:57 -0000 On 03.02.2015 13:42, Lev Serebryakov wrote: > > Recommended "reass all from any to any in" kills all incoming IPv6 > packets (at least, packets from 6in4 tunnel). "reass ip4 from any to > any in" works as expected. > > Is it documentation bug or implementation bug? Both :) Hit this bug several years ago, seems it is still here From owner-freebsd-ipfw@FreeBSD.ORG Thu Mar 5 16:13:14 2015 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 890BB16E for ; Thu, 5 Mar 2015 16:13:14 +0000 (UTC) Received: from forward4h.cmail.yandex.net (forward4h.cmail.yandex.net [IPv6:2a02:6b8:0:f35::14]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "forwards.mail.yandex.net", Issuer "Certum Level IV CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 33A02EFA for ; Thu, 5 Mar 2015 16:13:14 +0000 (UTC) Received: from smtp2h.mail.yandex.net (smtp2h.mail.yandex.net [84.201.187.145]) by forward4h.cmail.yandex.net (Yandex) with ESMTP id CEA1A160C; Thu, 5 Mar 2015 19:13:09 +0300 (MSK) Received: from smtp2h.mail.yandex.net (localhost [127.0.0.1]) by smtp2h.mail.yandex.net (Yandex) with ESMTP id 763D317080B0; Thu, 5 Mar 2015 19:13:09 +0300 (MSK) Received: from unknown (unknown [2a02:6b8:0:40c:120b:a9ff:fe93:c998]) by smtp2h.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id pefB5DnJyO-D8Y0RhDO; Thu, 5 Mar 2015 19:13:08 +0300 (using TLSv1.2 with cipher AES128-SHA (128/128 bits)) (Client certificate not present) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1425571988; bh=fSZjC0ZMzTrrAwbkAf2g2EdcdlgzuDFNiK2Hrk7z0CQ=; h=Message-ID:Date:From:User-Agent:MIME-Version:To:Subject: References:In-Reply-To:Content-Type; b=mEmI3ocOF/KEO6H+hGoB/06WoeYSGXETDf/dq+kGObP+3JJHrHZW3wmhAGrlqJTae CnHBgSL8cbjho9OhFZhhMLbjubeLgDAgXet87WUYDGZSLLxn5wL7W+f0InrJNlIKLu unMorKnO/4mk4NSrU+ppZBC6tWAZwLqTsCAIbgQw= Authentication-Results: smtp2h.mail.yandex.net; dkim=pass header.i=@yandex.ru Message-ID: <54F8805A.30809@yandex.ru> Date: Thu, 05 Mar 2015 19:12:10 +0300 From: "Andrey V. Elsukov" User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.3.0 MIME-Version: 1.0 To: Emil Muratov , freebsd-ipfw@freebsd.org Subject: Re: "reass all from any to any" kills IPv6 packets References: <54D0A623.6020009@FreeBSD.org> <54F875BD.1040007@hotplug.ru> In-Reply-To: <54F875BD.1040007@hotplug.ru> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="XsjJV3WrPXEKnBKwpLwEjXd6iLU1wnO5J" X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Mar 2015 16:13:14 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --XsjJV3WrPXEKnBKwpLwEjXd6iLU1wnO5J Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 05.03.2015 18:26, Emil Muratov wrote: > On 03.02.2015 13:42, Lev Serebryakov wrote: >> >> Recommended "reass all from any to any in" kills all incoming IPv6 >> packets (at least, packets from 6in4 tunnel). "reass ip4 from any to >> any in" works as expected. >> >> Is it documentation bug or implementation bug? >=20 > Both :) Hit this bug several years ago, seems it is still here AFAIR, I made the patch for such PR, but nobody wanted to test it :) https://people.freebsd.org/~ae/ipfw_ip6reass.diff Probably now I can test it myself a bit later. --=20 WBR, Andrey V. Elsukov --XsjJV3WrPXEKnBKwpLwEjXd6iLU1wnO5J Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCAAGBQJU+IBeAAoJEAHF6gQQyKF6vg8H/0YkpWv8++OsPbs/tjHOPDB7 3p83PJr8ORn2STs1zEtnEMWA2vctL492q3XDf+f9QV8RcEN4G/zPiGpk6m+V3Gui KwKNUDrYA7r4ollQbA0eSWZshm3/ua6FMn0gIfyX72yPge8gIhY/b6kTvltVF2fo AGohrToOv/89OaHPnkDrsAqee7rxwCG7lAsQNRZd3yvv+RZnQfpGZ6OLnrn/u+OY y3I+9nuEedckLNWeJXlDvBKwcJy+L4JyEFEhMYwTBqJRb8ETm76P+OYgWVq1spJO 90+9rIRNi2r4Ec3aB9Ch0ZTfNr6C5kZAwmGcx1ZkjpwEhvlPvSZXLgqed2wVM8U= =L8ag -----END PGP SIGNATURE----- --XsjJV3WrPXEKnBKwpLwEjXd6iLU1wnO5J-- From owner-freebsd-ipfw@FreeBSD.ORG Thu Mar 5 18:21:11 2015 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id CF369C2C for ; Thu, 5 Mar 2015 18:21:11 +0000 (UTC) Received: from gate.pik.ru (gate.pik.ru [IPv6:2a03:5a00:31:40::25]) by mx1.freebsd.org (Postfix) with ESMTP id 8BDD0267 for ; Thu, 5 Mar 2015 18:21:11 +0000 (UTC) Received: from delta.hotplug.ru (unknown [IPv6:2a03:5a00:31:10::35:1]) by gate.pik.ru (Postfix) with ESMTP id 1F36611537; Thu, 5 Mar 2015 21:21:08 +0300 (MSK) Received: from ghost-pc.home.lan (unknown [IPv6:2a02:290:2:1f9:cc19:1f11:abed:19fa]) by delta.hotplug.ru (Postfix) with ESMTPSA id D78E54147; Thu, 5 Mar 2015 21:21:07 +0300 (MSK) Content-Type: text/plain; charset=utf-8; format=flowed; delsp=yes To: freebsd-ipfw@freebsd.org, "Andrey V. Elsukov" Subject: Re: "reass all from any to any" kills IPv6 packets References: <54D0A623.6020009@FreeBSD.org> <54F875BD.1040007@hotplug.ru> <54F8805A.30809@yandex.ru> Date: Thu, 05 Mar 2015 21:21:09 +0300 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: "Emil Muratov" Message-ID: In-Reply-To: <54F8805A.30809@yandex.ru> User-Agent: Opera Mail/12.17 (Win32) X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Mar 2015 18:21:11 -0000 > On 05.03.2015 18:26, Emil Muratov wrote: >> On 03.02.2015 13:42, Lev Serebryakov wrote: >>> >>> Recommended "reass all from any to any in" kills all incoming IPv6 >>> packets (at least, packets from 6in4 tunnel). "reass ip4 from any to >>> any in" works as expected. >>> >>> Is it documentation bug or implementation bug? >> >> Both :) Hit this bug several years ago, seems it is still here > > AFAIR, I made the patch for such PR, but nobody wanted to test it :) > https://people.freebsd.org/~ae/ipfw_ip6reass.diff > > Probably now I can test it myself a bit later. > Maybe I missed it, I will do some tests and provide feedback. From owner-freebsd-ipfw@FreeBSD.ORG Fri Mar 6 21:23:20 2015 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 5D0BFB04 for ; Fri, 6 Mar 2015 21:23:20 +0000 (UTC) Received: from gate.pik.ru (gate.pik.ru [IPv6:2a03:5a00:31:40::25]) by mx1.freebsd.org (Postfix) with ESMTP id 0904D5EC for ; Fri, 6 Mar 2015 21:23:20 +0000 (UTC) Received: from delta.hotplug.ru (localhost [127.0.0.1]) by gate.pik.ru (Postfix) with ESMTP id 3A9AA1581D; Sat, 7 Mar 2015 00:23:16 +0300 (MSK) Received: from delta.hotplug.ru (unknown [141.101.202.35]) by gate.pik.ru (Postfix) with ESMTP id 04A931581C; Sat, 7 Mar 2015 00:23:14 +0300 (MSK) Received: from ghost-pc.home.lan (unknown [IPv6:2a02:290:2:1f9:cc19:1f11:abed:19fa]) by delta.hotplug.ru (Postfix) with ESMTPSA id 6AB064190; Sat, 7 Mar 2015 00:23:13 +0300 (MSK) Content-Type: text/plain; charset=utf-8; format=flowed; delsp=yes To: freebsd-ipfw@freebsd.org, "Andrey V. Elsukov" Subject: Re: "reass all from any to any" kills IPv6 packets References: <54D0A623.6020009@FreeBSD.org> <54F875BD.1040007@hotplug.ru> <54F8805A.30809@yandex.ru> Date: Sat, 07 Mar 2015 00:23:13 +0300 MIME-Version: 1.0 Content-Transfer-Encoding: Quoted-Printable From: "Emil Muratov" Message-ID: In-Reply-To: <54F8805A.30809@yandex.ru> User-Agent: Opera Mail/12.17 (Win32) X-KLMS-Rule-ID: 1 X-KLMS-Message-Action: clean X-KLMS-AntiSpam-Lua-Profiles: 74206 [Mar 06 2015] X-KLMS-AntiSpam-Version: 5.5.4 X-KLMS-AntiSpam-Envelope-From: gpm@hotplug.ru X-KLMS-AntiSpam-Rate: 40 X-KLMS-AntiSpam-Status: not_detected X-KLMS-AntiSpam-Method: none X-KLMS-AntiSpam-Moebius-Timestamps: 3411485, 3411549, 3411380 X-KLMS-AntiSpam-Info: LuaCore: 166 2015-02-18_14-37-18 59b0fb5d1fe0bc13ab72a23d6aa445f4185e0a58, {relay has no DNS name}, Auth:dmarc=none header.from=hotplug.ru; spf=none smtp.mailfrom=hotplug.ru; dkim=none, {rdns complete}, {DNS response errors} X-KLMS-AntiSpam-Interceptor-Info: scan successful X-KLMS-AntiVirus: Kaspersky Security 8.0 for Linux Mail Server 8.0.0.455, not checked X-KLMS-AntiVirus-Status: NotChecked: not checked, skipped X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Mar 2015 21:23:20 -0000 Andrey V. Elsukov =D0=BF=D0=B8=D1=81=D0=B0=D0=BB(=D0= =B0) =D0=B2 =D1=81=D0=B2=D0=BE=D1=91=D0=BC =D0=BF=D0=B8=D1=81=D1=8C=D0=BC= =D0=B5 Thu, 05 Mar = 2015 19:12:10 +0300: > On 05.03.2015 18:26, Emil Muratov wrote: >> On 03.02.2015 13:42, Lev Serebryakov wrote: >>> >>> Recommended "reass all from any to any in" kills all incoming IPv6 >>> packets (at least, packets from 6in4 tunnel). "reass ip4 from any to= >>> any in" works as expected. >>> >>> Is it documentation bug or implementation bug? >> >> Both :) Hit this bug several years ago, seems it is still here > > AFAIR, I made the patch for such PR, but nobody wanted to test it :) > https://people.freebsd.org/~ae/ipfw_ip6reass.diff > > Probably now I can test it myself a bit later. > Still doesn't work for me. What was done: applied patch to = /usr/src/sys/netpfil/ipfw/ip_fw2.c, rebuilt & installed kernel & ipfw ad= d = 10 reass all from any to any in