From owner-freebsd-net@freebsd.org Tue Dec 1 15:19:10 2015 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BA7D7A2C5BE for ; Tue, 1 Dec 2015 15:19:10 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4A74D1DCC for ; Tue, 1 Dec 2015 15:19:10 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from zero-gravitas.local ([IPv6:2001:8b0:151:1:2ef0:eeff:fe24:fa38]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id tB1FIwe4058940 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Tue, 1 Dec 2015 15:18:59 GMT (envelope-from matthew@FreeBSD.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org DKIM-Filter: OpenDKIM Filter v2.10.3 smtp.infracaninophile.co.uk tB1FIwe4058940 Authentication-Results: smtp.infracaninophile.co.uk/tB1FIwe4058940; dkim=none; dkim-atps=neutral X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host [IPv6:2001:8b0:151:1:2ef0:eeff:fe24:fa38] claimed to be zero-gravitas.local Subject: Re: IPFW blocked my IPv6 NTP traffic To: freebsd-net@freebsd.org References: <1448920706.962818.454005905.61CF9154@webmail.messagingengine.com> <1448956697.854911427.15is5btc@frv34.fwdcdn.com> <1448982333.1269981.454734633.11BA4DB2@webmail.messagingengine.com> From: Matthew Seaman Message-ID: <565DBA5B.20203@FreeBSD.org> Date: Tue, 1 Dec 2015 15:18:51 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <1448982333.1269981.454734633.11BA4DB2@webmail.messagingengine.com> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="TmVMsQMKq8Ifili5mSUhmhlGRWTbmXSVC" X-Virus-Scanned: clamav-milter 0.98.7 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.7 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Dec 2015 15:19:10 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --TmVMsQMKq8Ifili5mSUhmhlGRWTbmXSVC Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 2015/12/01 15:05, Mark Felder wrote: > Notice how almost all of them are port 123 on both sides, but a few of > them are not. Why? The RFC says that NTP is supposed to be using port > 123 as both the source and destination port, but I clearly have > something happening on port 16205. Is something screwy with ntpd in > CURRENT? NTP not using port 123 as the source port usually indicates that it is behind a NAT gateway at the other end. It's harmless and fairly common. Cheers, Matthew --TmVMsQMKq8Ifili5mSUhmhlGRWTbmXSVC Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQJ8BAEBCgBmBQJWXbpiXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQxOUYxNTRFQ0JGMTEyRTUwNTQ0RTNGMzAw MDUxM0YxMEUwQTlFNEU3AAoJEABRPxDgqeTnca8P/1p9ApkkoieNtD658c0QY8HP EFIiCAuvWWd65VGyvaKB2MncImxIE0zsB8Ios0dvDNcTTLL6io+5SkQmUDfZHHBY FF59jtmHO9UxniSVS7Z2H3BikGMFCtTRvX6agJOU6idgDaPjeYa8GdGT5sNJm/c5 ONmd1mtJcH0acD+iZGXXwCFL8JTGE2bllg4zHOKQOhv/Ks5OrE4TJSvdU+RNqQpr 6XfN8R82t8z/sj4pHLvaMyw4pnr9TlB/ZhwOJtfgpAnMZ6xLTKe3WlNEzbbHAz/L CZoyx6oJRRqo4PAL5M4dq7F28i7jYb0lyiN8FG1xEh4D8VjItBQdPB0itcsJK+Wk LsfJH7GEpIbyhMHUmCbcLM5Tm20izp9MxKJar3SzwNReeiNJSvb0qh7im4Z/qcA1 gbZUSl8xShcFmuwTh2ZG/6Au7rV2o28Z8ahP90G1cmaRQ2ntz1UCw0CQJ/MQFA+W opmjt0Ft1kovxoLIDq61Xm3OxVPA3otdFtcOgxAGf8n9TLXDMHo7umfU0IAjGHLu 8LCDsusNUTjwledbJtyzpZFuIwcKk1IN/yI9Pyw4rcC5sK9dgOsxatpqdKa+m/6V 3Lg3NITT7pFCIIIBVPrrBYCkbpBtZPpCPVztRbh0hcizD4TmHuzm4YeG96ktJbkj F43EG5KLONF5fCtsiHTt =yI9P -----END PGP SIGNATURE----- --TmVMsQMKq8Ifili5mSUhmhlGRWTbmXSVC--