tech-net archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: IPv6 TCP sessions hangs when using PF keep state

On 7/01/2013 12:43 AM, Greg Troxel wrote:
> It very dimly rings a bell.  I think I saw a problem where ipfilter did
> range checks on sequence numbers, but this depended on seeing window
> scaling options.
> So I would use ipfstat -inh6 (and -onh6) and find the blocked packets,
> and add log statements, and also dump your state entries.  It wouldn't
> surprise me if there's a bug.

I don't mean to dis you, but recommending the use of ipfstat to someone
that is using pf won't help.

To me, this sounds like an MSS problem.


Home | Main Index | Thread Index | Old Index