>Number: 6495
>Category: kernel
>Synopsis: Carp interfaces do not send ICMP redirects
>Confidential: yes
>Severity: serious
>Priority: medium
>Responsible: bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: unknown
>Arrival-Date: Wed Oct 20 15:10:01 GMT 2010
>Closed-Date:
>Last-Modified:
>Originator:
>Release:
>Organization:
>Environment:
System : OpenBSD 4.6
Details : OpenBSD 4.6-stable (GENERIC) #53: Wed May 19 18:16:34 CDT
2010
[email protected]:/usr/src/sys/arch/i386/compile/GENERIC
Architecture: OpenBSD.i386
Machine : i386
>Description:
I've OpenBSD firewall/routers using carp/pfsync for hot-failover. The
box is the default gateway. I put a static route on the box to route
to a temporary gateway to another network and did not change the
routes in the rest of the network. I was expecting to see the box
issue ICMP redirects for packets sent to the default gateway. This
did not happen. Instead the outbound half of the traffic bounces off
the firewall.
The same problem is reported here (from 2006):
http://www.mail-archive.com/[email protected]/msg15398.html
I am sorry but do not have a lot of time to work with you on
this at the moment. I will see what I can do. If this really
is a long standing problem it seemed a good idea to file
an official bug report so that the issue can be addressed.
>How-To-Repeat:
Have carp interface be the network's default gateway.
Install static route to a gateway to another network.
Run tcpdump on the real interface behind the carp interface.
Initiate traffic from within the network to the "other network".
Note that tcpdump sees no icmp redirect but sees, e.g., the
outbound half of a tcp connection going both in and then out
the interface.
>Fix:
None known.
dmesg:
2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
arp info overwritten for 192.168.1.58 by 00:23:ae:b1:ec:c0 on sis2
arp info overwritten for 192.168.1.58 by a4:ba:db:f0:2c:84 on sis2
carp4: state transition: MASTER -> BACKUP
carp5: state transition: MASTER -> BACKUP
carp1: state transition: MASTER -> BACKUP
carp3: state transition: MASTER -> BACKUP
carp5: state transition: BACKUP -> MASTER
carp1: state transition: BACKUP -> MASTER
carp3: state transition: BACKUP -> MASTER
carp4: state transition: BACKUP -> MASTER
carp2: state transition: BACKUP -> MASTER
carp2: state transition: BACKUP -> MASTER
carp5: state transition: MASTER -> BACKUP
carp4: state transition: MASTER -> BACKUP
carp1: state transition: MASTER -> BACKUP
carp3: state transition: MASTER -> BACKUP
carp5: state transition: BACKUP -> MASTER
carp4: state transition: BACKUP -> MASTER
carp1: state transition: BACKUP -> MASTER
carp3: state transition: BACKUP -> MASTER
carp2: state transition: BACKUP -> MASTER
vr0: restarting
syncing disks... done
OpenBSD 4.6-stable (GENERIC) #53: Wed May 19 18:16:34 CDT 2010
[email protected]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Geode(TM) Integrated Processor by AMD PCS ("AuthenticAMD" 586-class) 500
MHz
cpu0: FPU,DE,PSE,TSC,MSR,CX8,SEP,PGE,CMOV,CFLUSH,MMX
real mem = 536440832 (511MB)
avail mem = 509902848 (486MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 20/70/03, BIOS32 rev. 0 @ 0xfac40
pcibios0 at bios0: rev 2.0 @ 0xf0000/0x10000
pcibios0: pcibios_get_intr_routing - function not supported
pcibios0: PCI IRQ Routing information unavailable.
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc8000/0xa800
cpu0 at mainbus0: (uniprocessor)
amdmsr0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
io address conflict 0x6100/0x100
io address conflict 0x6200/0x200
pchb0 at pci0 dev 1 function 0 "AMD Geode LX" rev 0x31
glxsb0 at pci0 dev 1 function 2 "AMD Geode LX Crypto" rev 0x00: RNG AES
vr0 at pci0 dev 6 function 0 "VIA VT6105M RhineIII" rev 0x96: irq 11, address
00:00:24:ca:3f:78
ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 0x004063,
model 0x0034
vr1 at pci0 dev 7 function 0 "VIA VT6105M RhineIII" rev 0x96: irq 5, address
00:00:24:ca:3f:79
ukphy1 at vr1 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 0x004063,
model 0x0034
vr2 at pci0 dev 8 function 0 "VIA VT6105M RhineIII" rev 0x96: irq 9, address
00:00:24:ca:3f:7a
ukphy2 at vr2 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 0x004063,
model 0x0034
vr3 at pci0 dev 9 function 0 "VIA VT6105M RhineIII" rev 0x96: irq 12, address
00:00:24:ca:3f:7b
ukphy3 at vr3 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 0x004063,
model 0x0034
ppb0 at pci0 dev 14 function 0 "TI PCI2250 PCI-PCI" rev 0x02
pci1 at ppb0 bus 1
sis0 at pci1 dev 0 function 0 "NS DP83815 10/100" rev 0x00, DP83816A: irq 10,
address 00:00:24:c9:ad:f4
nsphyter0 at sis0 phy 0: DP83815 10/100 PHY, rev. 1
sis1 at pci1 dev 1 function 0 "NS DP83815 10/100" rev 0x00, DP83816A: irq 6,
address 00:00:24:c9:ad:f5
nsphyter1 at sis1 phy 0: DP83815 10/100 PHY, rev. 1
sis2 at pci1 dev 2 function 0 "NS DP83815 10/100" rev 0x00, DP83816A: irq 10,
address 00:00:24:c9:ad:f6
nsphyter2 at sis2 phy 0: DP83815 10/100 PHY, rev. 1
sis3 at pci1 dev 3 function 0 "NS DP83815 10/100" rev 0x00, DP83816A: irq 6,
address 00:00:24:c9:ad:f7
nsphyter3 at sis3 phy 0: DP83815 10/100 PHY, rev. 1
hifn0 at pci0 dev 17 function 0 "Hifn 7955/7954" rev 0x00: LZS 3DES ARC4 MD5
SHA1 RNG AES PK, 32KB dram, irq 15
glxpcib0 at pci0 dev 20 function 0 "AMD CS5536 ISA" rev 0x03: rev 0, 32-bit
3579545Hz timer, watchdog, gpio
gpio0 at glxpcib0: 32 pins
pciide0 at pci0 dev 20 function 2 "AMD CS5536 IDE" rev 0x01: DMA, channel 0
wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: <SanDisk SDCFH2-8192>
wd0: 4-sector PIO, LBA, 7815MB, 16007040 sectors
wd1 at pciide0 channel 0 drive 1: <OCZ-VERTEX>
wd1: 1-sector PIO, LBA48, 30533MB, 62533296 sectors
wd0(pciide0:0:0): using PIO mode 4, DMA mode 2
wd1(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 ignored (disabled)
ohci0 at pci0 dev 21 function 0 "AMD CS5536 USB" rev 0x02: irq 7, version 1.0,
legacy support
ehci0 at pci0 dev 21 function 1 "AMD CS5536 USB" rev 0x02: irq 7
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "AMD EHCI root hub" rev 2.00/1.00 addr 1
isa0 at glxpcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com0: console
com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard
pcppi0 at isa0 port 0x61
midi0 at pcppi0: <PC speaker>
spkr0 at pcppi0
nsclpcsio0 at isa0 port 0x2e/2: NSC PC87366 rev 9: GPIO VLM TMS
gpio1 at nsclpcsio0: 29 pins
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
usb1 at ohci0: USB revision 1.0
uhub1 at usb1 "AMD OHCI root hub" rev 1.00/1.00 addr 1
biomask 6185 netmask ffe5 ttymask ffff
mtrr: K6-family MTRR support (2 registers)
softraid0 at root
root on wd0a swap on wd0b dump on wd0b
carp1: state transition: BACKUP -> MASTER
carp2: state transition: BACKUP -> MASTER
carp3: state transition: BACKUP -> MASTER
carp4: state transition: BACKUP -> MASTER
carp5: state transition: BACKUP -> MASTER
carp6: state transition: BACKUP -> MASTER
carp2: state transition: BACKUP -> MASTER
>Release-Note:
>Audit-Trail:
>Unformatted:
