[RESOLVED] --was: Re: ACKs create separate state
Axel Rau <[email protected]> Wed, 18 Dec 2019 12:47:03 +0100
| Newsgroups | gmane.os.openbsd.pf |
|---|---|
| Message-ID | <[email protected]> |
--Apple-Mail=_F9080774-F321-4E5B-9388-2C282F941B92 Content-Type: multipart/alternative; boundary="Apple-Mail=_1C370390-9FC5-442C-B5F6-701C713B54F7" --Apple-Mail=_1C370390-9FC5-442C-B5F6-701C713B54F7 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > Am 10.12.2019 um 19:56 schrieb Axel Rau <[email protected]>: >=20 > It seems to be missing IPv6 route to the sender. > When I play with ping6 from the source to the target, after a while = the pings go through. > =46rom that point, the pings in the opposite direction also go through = and every works. After startup, the routingtable shows entries like this: 2a05:bec0:26:2::70 0c:c4:7a:ce:9e:90 UHLc 2a05:bec0:26:2::71 link#1 UHLc The 2nd one is an alias address for the 1st one (a jail on a FreeBSD = box). After ping6 to this 2nd address, it looks as expected: fw1# ping6 2a05:bec0:26:2::71 2a05:bec0:26:2::70 0c:c4:7a:ce:9e:90 UHLc 2a05:bec0:26:2::71 0c:c4:7a:ce:9e:90 UHLc The reason for this misbehaviour was that I disabled auto linklocal (-auto_linklocal in rc.conf) on the FreeBSD box. Axel --- PGP-Key: CDE74120 =E2=98=80 computing @ chaos claudius --Apple-Mail=_1C370390-9FC5-442C-B5F6-701C713B54F7 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; = charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><br = class=3D""><div><br class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D"">Am 10.12.2019 um 19:56 schrieb Axel Rau <<a = href=3D"mailto:[email protected]" = class=3D"">[email protected]</a>>:</div><br = class=3D"Apple-interchange-newline"><div class=3D""><span = style=3D"caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; = font-size: 12px; font-style: normal; font-variant-caps: normal; = font-weight: normal; letter-spacing: normal; text-align: start; = text-indent: 0px; text-transform: none; white-space: normal; = word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: = none; float: none; display: inline !important;" class=3D"">It seems to = be missing IPv6 route to the sender.</span><br style=3D"caret-color: = rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 12px; font-style: = normal; font-variant-caps: normal; font-weight: normal; letter-spacing: = normal; text-align: start; text-indent: 0px; text-transform: none; = white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none;" class=3D""><span style=3D"caret-color: rgb(0, 0, = 0); font-family: Menlo-Regular; font-size: 12px; font-style: normal; = font-variant-caps: normal; font-weight: normal; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; float: none; display: inline !important;" = class=3D"">When I play with ping6 from the source to the target, after a = while the pings go through.</span><br style=3D"caret-color: rgb(0, 0, = 0); font-family: Menlo-Regular; font-size: 12px; font-style: normal; = font-variant-caps: normal; font-weight: normal; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none;" class=3D""><span style=3D"caret-color: rgb(0, 0, = 0); font-family: Menlo-Regular; font-size: 12px; font-style: normal; = font-variant-caps: normal; font-weight: normal; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; float: none; display: inline !important;" = class=3D"">=46rom that point, the pings in the opposite direction also = go through and every works.</span><br style=3D"caret-color: rgb(0, 0, = 0); font-family: Menlo-Regular; font-size: 12px; font-style: normal; = font-variant-caps: normal; font-weight: normal; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none;" class=3D""></div></blockquote></div><div = class=3D""><br class=3D""></div>After startup, the routingtable shows = entries like this:<div class=3D""><br class=3D""></div><div = class=3D""><span style=3D"font-family: Menlo-Regular;" = class=3D"">2a05:bec0:26:2::70 = &n= bsp; 0c:c4:7a:ce:9e:90 = UHLc</span><br style=3D"font-family: Menlo-Regular;" class=3D""><span = style=3D"font-family: Menlo-Regular;" class=3D"">2a05:bec0:26:2::71 = &n= bsp; link#1 = UHLc</span><br style=3D"font-family: Menlo-Regular;" = class=3D""><div><br class=3D""></div><div>The 2nd one is an alias = address for the 1st one (a jail on a FreeBSD box).</div><div><br = class=3D""></div><div>After ping6 to this 2nd address, it looks as = expected:</div><div><br class=3D""></div><div><span style=3D"font-family: = Menlo-Regular;" class=3D"">fw1# ping6 2a05:bec0:26:2::71</span><br = style=3D"font-family: Menlo-Regular;" class=3D""><span = style=3D"font-family: Menlo-Regular;" class=3D"">2a05:bec0:26:2::70 = &n= bsp; 0c:c4:7a:ce:9e:90 = UHLc</span><br style=3D"font-family: Menlo-Regular;" class=3D""><span = style=3D"font-family: Menlo-Regular;" class=3D"">2a05:bec0:26:2::71 = &n= bsp; 0c:c4:7a:ce:9e:90 = UHLc</span><br style=3D"font-family: Menlo-Regular;" = class=3D""></div><div><span style=3D"font-family: Menlo-Regular;" = class=3D""><br class=3D""></span></div><div><span style=3D"font-family: = Menlo-Regular;" class=3D"">The reason for this misbehaviour was that I = disabled auto linklocal</span></div><div><span style=3D"font-family: = Menlo-Regular;" class=3D"">(-</span>auto_linklocal in rc.conf) on the = FreeBSD box.</div><div class=3D""><br class=3D""></div><div><span = style=3D"font-family: Menlo-Regular;" = class=3D"">Axel</span></div></div><div class=3D""><span = style=3D"font-family: Menlo-Regular;" class=3D""><br = class=3D""></span></div><div class=3D""> <div dir=3D"auto" style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, = 0); letter-spacing: normal; text-align: start; text-indent: 0px; = text-transform: none; white-space: normal; word-spacing: 0px; = -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: = break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" = class=3D""><div dir=3D"auto" style=3D"caret-color: rgb(0, 0, 0); color: = rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: = 0px; text-transform: none; white-space: normal; word-spacing: 0px; = -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: = break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" = class=3D""><div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: = break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" = class=3D""><div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: = break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" = class=3D""><div style=3D"color: rgb(0, 0, 0); font-family: Helvetica; = font-style: normal; font-variant-ligatures: normal; = font-variant-position: normal; font-variant-caps: normal; = font-variant-numeric: normal; font-variant-alternates: normal; = font-variant-east-asian: normal; font-weight: normal; letter-spacing: = normal; line-height: normal; orphans: 2; text-align: -webkit-auto; = text-indent: 0px; text-transform: none; white-space: normal; widows: 2; = word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: = break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" = class=3D""><div class=3D"">---<br class=3D"">PGP-Key: CDE74120 = =E2=98=80 computing @ chaos = claudius</div></div></div></div></div></div> </div> <br class=3D""></body></html>= --Apple-Mail=_1C370390-9FC5-442C-B5F6-701C713B54F7-- --Apple-Mail=_F9080774-F321-4E5B-9388-2C282F941B92 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.2 Comment: GPGTools - http://gpgtools.org iQIyBAEBCAAdFiEEl5evOTfnjZdhkBzKaPxTRM3nQSAFAl36EbcACgkQaPxTRM3n QSDmug/1H1LsFQAyiHtBb6yXh+iIyUGwRlrt1/4vFIh8i+hnQUN7SKnBUz6u4YFC 03qMz/5z3U/rk59heO8qDMHUP7HP7U9AOSsZnsxFtldWmBxEkbWpllbdyIl4rcxr KDZv4HzRsDLUWv27ANyVPs6k1l9k45eyX2WNvxUqltYwzo7fHhc/zloLoU1L4cYd 4OFp35V3ZJyLHjCYGgLpBWjNGm04PtJvg/vwvkzO16CRuUQUJ+/b08uB3f+/kRzi UjDrgNAMZaFlvE/T/ALWFtxrYYICSkCV8Z5xs1nJdUWhY3VGkGHQDvbPiU4YoP5M rRlVFgormyWRVs50nPK3JcfGGpO4QensLlLTU8l0vKOc9m4brt1+9VDFP37JhkFt Dy2t1lMfvn0ywFt+a+Yf0TJglIMXZ4Xd8blTEL5lJ5T02vO0/NvKbCZ5Zpl3S/+J EPW+rU0XalTewmi81ItHt7awH62reEFGOxkpB2B08KLiuLiGRD/Yg79ULfTz1JUc +F7t2iBi1FZXA5skwzh1gMESG30reWyUzVDTOWg9fUJXonseqzY3icq/rjowe4t/ qwsB+wSAHZqGbkgEW6FZGHOJEVb8VwVIHjYZCke3vF5wjvYDVxonZbKEEUVSO3+0 h7JrlcdW82+uGf7wNkKSCsiZLGJqAQHNta1vIBW9wH1ulGJINg== =1ZWp -----END PGP SIGNATURE----- --Apple-Mail=_F9080774-F321-4E5B-9388-2C282F941B92--