Subject: kern/8604: ipf prematurely expires connections
To: None <firstname.lastname@example.org>
From: Charles M. Hannum <email@example.com>
Date: 10/10/1999 17:18:41
>Synopsis: ipf prematurely expires connections
>Responsible: kern-bug-people (Kernel Bug People)
>Arrival-Date: Sun Oct 10 17:18:00 1999
>Originator: Charles M. Hannum
The NetBSD Mission
When ipf adds new state for a TCP connection, it initializes
the state to TCPS_CLOSED. This is not changed when an
ACK-only packet is received; thus, when an ipf `keep state'
rule is activated while a connection is already active, the
connection is expired prematurely.
With no ipf rules, establish an outgoing connection. Then add
a rule like:
pass out quick on ppp0 proto tcp/udp all keep state
Now make the connection non-idle somehow. With `ipfstat -s',
note that the state is initialized to `ttl 60 state 0/0'.
Should be a trivial change to the state machine in