Hello,
Recently IPfilter has been filling my SYSLOG file with the following messages:
Mar 17 13:01:17 6A:vger unix: IPFilter: ipl_if_output: mbuf block too small
(m_len=0) for IP vers+hlen, m_type=2 m_flags=0x41
After searching around a bit it turns out that it has to do with ssl/ssh. Every
time I open a new ssh connection
I get that error, and maybe sometimes in between as well, although I haven't
checked that.
The rule for ssh in my ipf.conf is
pass in quick on tg1 proto tcp from 0/0 to vger port = 22 flags S keep state
and that has worked fine before. The problems seem to have started since we
upgraded our IRIX from 6.5.24 to 6.5.27. The filter still does its job, but my
SYSLOG is quickly filling up to be unworkable sizes.
IRIX 6.5.27f on Onyx4
IPfilter 3.4.27 (last supported on sgi.com)
I tried to build 4.1.7 in case it was some old bug, but I can't get it to build
correctly:
cc-3316 cc: ERROR File = ../../netinet/ip_pptp_pxy.c, Line = 275
The expression must be a pointer to a complete object type.
msg = fin->fin_dp + (TCP_OFF(tcp) << 2);
Can anybody help me out?
Kind regards,
Jeroen
--
Jeroen Akershoek - a.k.a. "Murphy's Son"
SARA Computing and Network Services
tel: +31 20 5923000 fax: +31 20 6683167
All that glitters has a high refractive index
