Date: Fri, 23 Feb 2007 02:36:06 +0000 From: RW <fbsd06@mlists.homeunix.com> To: freebsd-questions@freebsd.org Subject: Re: PF slowing down file copies Message-ID: <20070223023606.13be5e5e@gumby.homeunix.com> In-Reply-To: <19861fba0702221445r3124eecbq852d774d0ed4e479@mail.gmail.com> References: <200702202021.55723.pablo.fernandez@rs.com.ar> <19861fba0702211038p3144271ey1e30cf67311678ef@mail.gmail.com> <20070222143030.0b858e86@gumby.homeunix.com> <19861fba0702221445r3124eecbq852d774d0ed4e479@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 22 Feb 2007 23:45:06 +0100 J65nko <j65nko@gmail.com> wrote: > On 2/22/07, RW <fbsd06@mlists.homeunix.com> wrote: > > On Wed, 21 Feb 2007 19:38:39 +0100 > > J65nko <j65nko@gmail.com> wrote: > > > > > For keeping state on TCP connections you should only create state > > > on the first packet of the 3 way TCP handshake. Using "flags > > > S/SA" will ensure this. This will prevent problems with TCP > > > windows scaling.. > > > > Why? Creating a state entry causes subsequent packets, in the same > > tcp connection, to bypass the rules altogether. > > > > The OP did not keep state on TCP connections using "flags S/SA". That > can cause problems for TCP window scaling (defined in RFC 1323) and > result in stalling connections. > > >From http://undeadly.org/cgi?action=article&sid=20060928081238 under > "Create TCP states on the initial SYN packet" > How can a TCP connection start with anything other than an initial SYN packet?
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070223023606.13be5e5e>