Date: Thu, 28 May 2015 16:27:37 +0200 From: Julian Kornberger <juliank@tzi.de> To: "Andrey V. Elsukov" <ae@freebsd.org>, "net@freebsd.org" <net@freebsd.org> Subject: Re: Crash with GRE und IPFW fwd Message-ID: <556725D9.4090708@tzi.de> In-Reply-To: <55672123.1090101@FreeBSD.org> References: <5566565A.7030200@tzi.de> <55672123.1090101@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Am 28.05.2015 um 16:07 schrieb Andrey V. Elsukov: > Just noticed, you use ip_divert(4). gre(4) uses mbuf_tag to prevent > infinity loop and stack exhausting. When packet goes through ip_divert, > it loses this tag. You need to check your rules and avoid applying > divert rules to GRE packets. Also you can use some netgraph based tcpmss > implementation. I only pass TCP SYN packets to divert. This should not affect GRE packets? ipfw add divert $tcpmssd_port tcp from any to not me setup Thanks for your GRE module. I will give it a try. -- Julian
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?556725D9.4090708>