Re: npf and carp

[Mindaugas Rasiukevicius <rmind%netbsd.org@localhost>]

Brook Milligan <brook%nmsu.edu@localhost> wrote:
> I am trying to get npf to play nicely with a carp interface and am having
> trouble.  The basic setup is that two hosts share in IP via carp and I
> want to connect to that interface (i.e., either host) via ssh.  The
> following works:
> 
> - Carp will switch the interface from host to host
> - Ssh connects to either host via its native IP
> - Ssh connects to a carp IP only if npf is not active; this is the
> problem.

Hmm.  Perhaps it is a bug in network stack bug and the packet gets
associated with a different network interface.  Just a random guess.

What happens if you pass everything on carp0 ($ext_if_carp)?  Can you
please tcpdump -i carp0 port ssh and send me the pcap file?

-- 
Mindaugas