Date: Fri, 8 Apr 2016 10:03:25 +0100 From: Dr Josef Karthauser <joe@truespeed.com> To: Ian Smith <smithi@nimnet.asn.au> Cc: FreeBSD Stable <stable@freebsd.org>, freebsd-net@freebsd.org Subject: Re: IPFW with NAT : Problems with duplicate packets on FreeBSD 10.3-RC3 Message-ID: <F5A94B5B-9261-48F3-AD5E-C123EA48324D@truespeed.com> In-Reply-To: <20160408154100.E39547@sola.nimnet.asn.au> References: <A03E136A-7599-4992-9F9E-13E7350F972B@truespeed.com> <20160408154100.E39547@sola.nimnet.asn.au>
next in thread | previous in thread | raw e-mail | index | archive | help
> On 8 Apr 2016, at 06:51, Ian Smith <smithi@nimnet.asn.au> wrote: >=20 > On Thu, 7 Apr 2016 17:08:38 +0100, Dr Josef Karthauser wrote: >=20 > [ AppleMail msgs fail to quote properly in pine, so a partial quote: ] >=20 >> Looks like the first packet is being retransmitted, which means that=20= >> the nat is probably misconfigured and the TCP connection is broken in >> some strange way. >=20 >> Does anyone have a clue as to where to look? The ipfw rules are >> simple enough - what have I missed? >=20 > Do you have TSO enabled on that NIC? If so, see ipfw(8) BUGS, third=20= > last para. If not, no idea .. >=20 Thanks Ian, It was exactly that issue! I wish I had remembered that I=E2=80=99d seen = that in the man page; would have saved hours of debugging :) Joe =E2=80=94=20 Dr Josef Karthauser Chief Technical Officer (01225) 300371 / (07703) 596893 www.truespeed.com / theTRUESPEED=20 @theTRUESPEED =20
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?F5A94B5B-9261-48F3-AD5E-C123EA48324D>