From owner-freebsd-pf@FreeBSD.ORG  Sat Mar  5 21:57:57 2005
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 1486016A4CE
	for <freebsd-pf@freebsd.org>; Sat,  5 Mar 2005 21:57:57 +0000 (GMT)
Received: from hotmail.com (bay24-f31.bay24.hotmail.com [64.4.18.81])
	by mx1.FreeBSD.org (Postfix) with ESMTP id E3B9143D2D
	for <freebsd-pf@freebsd.org>; Sat,  5 Mar 2005 21:57:56 +0000 (GMT)
	(envelope-from segr@hotmail.com)
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
	 Sat, 5 Mar 2005 13:57:56 -0800
Message-ID: <BAY24-F31D17EC37593D6F6C2DF03CC5D0@phx.gbl>
Received: from 204.9.110.182 by by24fd.bay24.hotmail.msn.com with HTTP;
	Sat, 05 Mar 2005 21:57:56 GMT
X-Originating-IP: [204.9.110.182]
X-Originating-Email: [segr@hotmail.com]
X-Sender: segr@hotmail.com
In-Reply-To: <20050305200559.GA26999@insomnia.benzedrine.cx>
From: "Stephane Raimbault" <segr@hotmail.com>
To: daniel@benzedrine.cx
Date: Sat, 05 Mar 2005 14:57:56 -0700
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 05 Mar 2005 21:57:56.0781 (UTC)
	FILETIME=[6397F5D0:01C521CE]
cc: freebsd-pf@freebsd.org
Subject: Re: nat / rdr timeouts?
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical discussion and general questions about packet filter (pf)
	<freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 05 Mar 2005 21:57:57 -0000

I cvsup'd RELENG_5 and recompiled the kernel and I'm seeing the same 
results.  Do I need to recompile any other parts of the system?

Do we believe I've stumbled onto a bug of pf... or is this some sort of 
anti-DoS feature?

>From: Daniel Hartmeier <daniel@benzedrine.cx>
>To: Stephane Raimbault <segr@hotmail.com>
>CC: freebsd-pf@freebsd.org
>Subject: Re: nat / rdr timeouts?
>Date: Sat, 5 Mar 2005 21:05:59 +0100
>
>On Sat, Mar 05, 2005 at 11:59:59AM -0700, Stephane Raimbault wrote:
>
> > I have a box running  FreeBSD 5.3-RELEASE-p5 and I'm running at nat and
> > redirecting port 80 traffic to a couple internal servers.
>
>The following bugfix was commited to RELENG_5 about two months ago, it's
>likely that it fixes your problem. It's not part of 5.3-RELEASE-p5
>(which is built from RELENG_5_3, afaik).
>
>http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/contrib/pf/net/pf.c.diff?r1=1.18.2.5&r2=1.18.2.6&f=h
>
>Daniel

_________________________________________________________________
Don't just Search. Find! http://search.sympatico.msn.ca/default.aspx The new 
MSN Search! Check it out!