Date: Wed, 24 May 2017 11:25:57 +0300 From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: Zaphod Beeblebrox <zbeeble@gmail.com>, Mike Tancsa <mike@sentex.net> Cc: FreeBSD Stable <freebsd-stable@freebsd.org> Subject: Re: No TCP-MD5 in 11.1-PRERELEASE. Message-ID: <62bbb1ca-96b9-1c99-4316-d513b9f8fe12@yandex.ru> In-Reply-To: <CACpH0MeXe_EYprx3C9usFSC24UJLSo4GLxfHeC-WnGLXcWRdkA@mail.gmail.com> References: <CACpH0MfLC3vNvhw7J=h%2Bw=kDqPvTucifB6r7PnTht178AsuWHg@mail.gmail.com> <e8de8529-f844-8ae1-55ce-5bc6e8bfecdb@sentex.net> <CACpH0MeXe_EYprx3C9usFSC24UJLSo4GLxfHeC-WnGLXcWRdkA@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --9nQ8cxNSMIAs1P9MSNabqRPpTfXv20UGl Content-Type: multipart/mixed; boundary="PJm28Qlf4abIBxSHX6cQihlsGCfqLnDKU"; protected-headers="v1" From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: Zaphod Beeblebrox <zbeeble@gmail.com>, Mike Tancsa <mike@sentex.net> Cc: FreeBSD Stable <freebsd-stable@freebsd.org> Message-ID: <62bbb1ca-96b9-1c99-4316-d513b9f8fe12@yandex.ru> Subject: Re: No TCP-MD5 in 11.1-PRERELEASE. References: <CACpH0MfLC3vNvhw7J=h+w=kDqPvTucifB6r7PnTht178AsuWHg@mail.gmail.com> <e8de8529-f844-8ae1-55ce-5bc6e8bfecdb@sentex.net> <CACpH0MeXe_EYprx3C9usFSC24UJLSo4GLxfHeC-WnGLXcWRdkA@mail.gmail.com> In-Reply-To: <CACpH0MeXe_EYprx3C9usFSC24UJLSo4GLxfHeC-WnGLXcWRdkA@mail.gmail.com> --PJm28Qlf4abIBxSHX6cQihlsGCfqLnDKU Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 23.05.2017 23:12, Zaphod Beeblebrox wrote: > I just added a setkey for the reverse, and connections still do not hap= pen. Look at the `netstat -sp tcp | grep sign' output. Also there are some debug messages can be generated by TCP syncache code, you can see them in the syslog's logs under LOG_DEBUG level. Also you can use tcpdump with -M flag to validate MD5 signatures. --=20 WBR, Andrey V. Elsukov --PJm28Qlf4abIBxSHX6cQihlsGCfqLnDKU-- --9nQ8cxNSMIAs1P9MSNabqRPpTfXv20UGl Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEzBAEBCAAdFiEE5lkeG0HaFRbwybwAAcXqBBDIoXoFAlklQ5UACgkQAcXqBBDI oXq8SggAtdiRJ6Dy9lK/LslSVGnxs6rBZeUHPC9+MCfMl/jrQTgCsZVOSzW40HsZ hfQrTGbN9ND8YhmXCovcfluebp4TzPz3O5zcJRCQ041dqclwXDJwIqRNQ3QdKnPN bhXptSTI7giOnuSS7bs0JeEExf1poPm/OHqV51DVdrkc34RDi1+CuN17Eij7rfxG PwK5cpSXiNXnOO/2NHEmoBPUKpd7NPA8Wa6ZjvNvoqb6CvVLLhkfI7N5I9qMKs9L owsBbiWyvHCDiAkLDEVPeVVixGit00EYQHJX3HR/4dZz8/0+wiSNuhG+kRvv0O0R HUL8FvPKuL8mOUQhWw5R3qEwiw9nFg== =eNac -----END PGP SIGNATURE----- --9nQ8cxNSMIAs1P9MSNabqRPpTfXv20UGl--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?62bbb1ca-96b9-1c99-4316-d513b9f8fe12>