Subject: RE: something strange with mbuf length...
To: 'Steven M. Bellovin' <smb@cs.columbia.edu>
From: Konstantin KABASSANOV <Konstantin.Kabassanov@lip6.fr>
List: tech-net
Date: 04/22/2006 17:55:23
This is a multi-part message in MIME format.

------=_NextPart_000_001E_01C66635.EDB379E0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

> -----Message d'origine-----
> De=A0: current-users-owner@NetBSD.org [mailto:current-users-
> owner@NetBSD.org] De la part de Steven M. Bellovin
> Envoy=E9=A0: samedi 22 avril 2006 17:38
> =C0=A0: Konstantin KABASSANOV
> Cc=A0: john@johnrshannon.com; rpaulo@fnop.net; tech-net@NetBSD.org; =
current-
> users@NetBSD.org
> Objet=A0: Re: something strange with mbuf length...
>=20
> On Sat, 22 Apr 2006 16:22:50 +0200, "Konstantin KABASSANOV"
> <Konstantin.Kabassanov@lip6.fr> wrote:
>=20
> >
> > > My lockups are unrelated. I'm using neither ath0, ppp0 or any =
packet
> > > filter. Rate of occurance is several time per day.
> > >
> >
> > Is your host forwarding ip traffic between different interfaces, or =
does
> it
> > use libpcap?
> >
> Here's my rule set:
>=20
> 	pass in quick on lo0 from any to any
>=20
> 	block in quick from any to any port =3D 7911
> 	block in quick from any to any port =3D 8010
> 	block out quick from any to any port =3D 5222
> 	pass in all
>=20

Here is my rule set (with masked ipv6 addresses). There is nothing
exceptional...

block in quick on sip0 head 100
block out quick on sip0 head 101

pass out quick on ath1 head 110

block in log quick on ath1 head 111
pass in quick on ath1 from any to MY_GLOBAL_IPV6_ON_ATH1/128 group 111
pass in quick on ath1 from any to MY_LINK_LOCAL_IPV6_ON_ATH1/128 group =
111
pass in quick on ath1 from any to ff02::1/128 group 111
pass in quick on ath1 from any to MY_MULTICAST_SOLICITED_ADDRESS_ON_ATH1
/128 group 111
pass in quick on ath1 from any to ff02::1:FF00:1/128 group 111
pass in quick on ath1 from any to ff05::1:3 group 111

pass in all head 200
pass out all head 201


Only packets for this host are allowed to enter the ath1 interface and =
some
dhcp6 related packets also... Other incoming packets on this interface =
are
captured by libpcap and treated in a customized demon...


------=_NextPart_000_001E_01C66635.EDB379E0
Content-Type: application/x-pkcs7-signature;
	name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
	filename="smime.p7s"
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------=_NextPart_000_001E_01C66635.EDB379E0--