Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 13 Feb 2014 17:09:50 +0100
From:      =?ISO-8859-1?Q?Jean-S=E9bastien_P=E9dron?= <dumbbell@FreeBSD.org>
To:        Gleb Smirnoff <glebius@FreeBSD.org>
Cc:        freebsd-net@FreeBSD.org, Christopher Faulet <christopher.faulet@capflam.org>
Subject:   Re: Loosing TCP/IPv4 connections with jails+pf on 10.0-RELEASE
Message-ID:  <52FCEE4E.8090500@FreeBSD.org>
In-Reply-To: <20140213153835.GU26785@FreeBSD.org>
References:  <52EF67EF.1000803@FreeBSD.org> <20140213153835.GU26785@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--DnERgcwlq9Bukgbc2LaVrgn6McFs5QQLq
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On 13.02.2014 16:38, Gleb Smirnoff wrote:
> Can you please try attached patch?

Yes, thank you, I'll rebuild it right now.

FWIW, the problem appeared again a few days ago. We stopped pf and
unloaded/reloaded the pf module to see if this fixed the problem. That
was yesterday and today we have no connection loss. We'll see how it
goes for the next few days.

> J> IPv6 connections are NOT affected: they work perfectly.
>=20
> That's really strange. Are they running stateless via pf?

Our jails have their own IPv6 so those connections don't go through pf.
We just need pf for IPv4 because we have only one public address.

--=20
Jean-S=E9bastien P=E9dron


--DnERgcwlq9Bukgbc2LaVrgn6McFs5QQLq
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (FreeBSD)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=K6hp
-----END PGP SIGNATURE-----

--DnERgcwlq9Bukgbc2LaVrgn6McFs5QQLq--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?52FCEE4E.8090500>