Re: IPv6 TCP sessions hangs when using PF keep state

[Darren Reed <darrenr%netbsd.org@localhost>]

On 7/01/2013 12:43 AM, Greg Troxel wrote:
> It very dimly rings a bell.  I think I saw a problem where ipfilter did
> range checks on sequence numbers, but this depended on seeing window
> scaling options.
>
> So I would use ipfstat -inh6 (and -onh6) and find the blocked packets,
> and add log statements, and also dump your state entries.  It wouldn't
> surprise me if there's a bug.

I don't mean to dis you, but recommending the use of ipfstat to someone
that is using pf won't help.

To me, this sounds like an MSS problem.

Darren