From owner-freebsd-net@FreeBSD.ORG  Thu Oct  6 07:13:31 2005
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 1294716A420;
	Thu,  6 Oct 2005 07:13:31 +0000 (GMT)
	(envelope-from jura@networks.ru)
Received: from networks.ru (orange.networks.ru [80.249.138.5])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 3648843D48;
	Thu,  6 Oct 2005 07:13:29 +0000 (GMT)
	(envelope-from jura@networks.ru)
Received: from [81.195.67.217] (HELO Jura)
	by networks.ru (CommuniGate Pro SMTP 4.3.8)
	with ESMTPS id 1984457; Thu, 06 Oct 2005 11:13:28 +0400
Message-ID: <069d01c5ca45$30825850$6504010a@Jura>
From: "Yuriy N. Shkandybin" <jura@networks.ru>
To: <freebsd-current@freebsd.org>
Date: Thu, 6 Oct 2005 11:11:32 +0400
MIME-Version: 1.0
Content-Type: text/plain; format=flowed; charset="koi8-r"; reply-type=original
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2670
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
Cc: freebsd-net@freebsd.org
Subject: pf synproxy broken
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Oct 2005 07:13:31 -0000

Hello.

Please look at PR  86072.
I've confirm that this issue exist in latest STABLE and HEAD.

How it looks:
1) without synproxy
 telnet localhost 22
Trying ::1...
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
SSH-2.0-OpenSSH_4.2p1 FreeBSD-20050903

2) with synproxy
pass in log on lo0 proto tcp from any to any port 22 flags S/SA synproxy state
 telnet localhost 22
Trying ::1...
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.


That's all no actual connection.

netstat:
tcp4       0      0  127.0.0.1.45427        127.0.0.1.22           ESTABLISHED

pfÓtl -s state
self tcp 127.0.0.1:22 <- 127.0.0.1:45427       PROXY:DST


Jura