Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 11 May 2009 13:07:46 -0700
From:      Jason Chambers <jchambers@ucla.edu>
To:        =?ISO-8859-1?Q?Jonas_B=FClow?= <freebsd@jongel.net>
Cc:        FreeBSD-stable@freebsd.org
Subject:   Re: ipfilter seems to be broken on 7.2-PRERELEASE as of April 25:th 2009.
Message-ID:  <4A088592.9070305@ucla.edu>
In-Reply-To: <196E4005-25E9-4C46-99BD-8F717849703F@jongel.net>
References:  <196E4005-25E9-4C46-99BD-8F717849703F@jongel.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Jonas Bülow wrote:
>
> After reboot it was not reachable from the network. After some
> troubleshooting I found that ipfilter seems to be the problem. Returning
> traffic originating from my host  (XXX) is blocked:
> 
(... snip ...)
> 
> Anyone seen this behaviour?
> 

Yes.  This appears to have made it to the RELEASE as well.

I believe it is due to updates to the FXP driver that allow checksumming
for tx/rx.  My guess is checksumming is enabled by default and you (and
I) happen to have the cards recognized by FXP that do not support it.
(The BAD in the ipf log represents bad checksum)

If you do "ifconfig fxp0 -txcsum -rxcsum" your problem should go away.
For /etc/rc.conf, just add -txcsum -rxcsum to the interface definition.

Regards,

--Jason




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4A088592.9070305>