You have problems with fragmentation, you could try something like match inet6 scrub (max-mss 1400 no-df).
On 2010-06-23, [email protected] <[email protected]> wrote: > Hi All, > I am trying to get some Web page on a IPv6 host by > using an OPenBSD 4.7 as a router. I can get the Web page > from the router but not from a host in the local net. > > I have tried with OpenSolaris machine and Windows 7 machines. > At the same time the similar commands with one address hangs > and with an other address just get the page. > > The bug is quite easy to reproduce. On a web browser, > getting page at the address "http://www.tunnelbroker.net"; fails > while "http://www.freebsd.org"; succeed. > > The following commands allow to reproduce the problem from the command line: > 1) wget --prefer-family IPv6 > http://www.kame.net/~suz/freebsd-ipv6-config-guide.txt > 2) wget --prefer-family IPv6 http://www.freebsd.org/index.html > > The command 1 hangs, the 2 succeed. > > I have tried with and without PF but the result is always identical. By > passing the command > 1 directly on router it succeed. By using IPv4 address, I have no problem at > all. > > I use a gif tunnel to get the IPv6 connectivity. > > Any ideas would be greatly appreciated. > > best regards, > > Here are some traces done during the execution of different commands > Jun 23 11:26:57.266472 2001:470:26:18f::2.38065 > > 2001:200:0:8002:203:47ff:fea5:3085.80: S 3353755832:3353755832(0) win 50400 > <mss 1440,nop,wscale 0,nop,nop,sackOK> > Jun 23 11:26:57.605050 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:26:18f::2.38065: S 1568188489:1568188489(0) ack 3353755833 win 65535 > <mss 1420,nop,wscale 1,sackOK,eol> [flowlabel 0x2faa4] > Jun 23 11:26:57.606623 2001:470:26:18f::2.38065 > > 2001:200:0:8002:203:47ff:fea5:3085.80: . ack 1 win 51120 > Jun 23 11:26:57.606777 2001:470:26:18f::2.38065 > > 2001:200:0:8002:203:47ff:fea5:3085.80: P 1:135(134) ack 1 win 51120 > Jun 23 11:26:57.971801 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:26:18f::2.38065: P 4261:4419(158) ack 135 win 33370 [flowlabel > 0x2faa4] > Jun 23 11:26:57.973307 2001:470:26:18f::2.38065 > > 2001:200:0:8002:203:47ff:fea5:3085.80: . ack 1 win 51120 <nop,nop,sack 1 > {4261:4419} > > Jun 23 11:27:06.533016 2001:470:26:18f::2.38065 > > 2001:200:0:8002:203:47ff:fea5:3085.80: R 3353755967:3353755967(0) win 51120 > Jun 23 11:27:45.462677 2001:470:26:18f::2.38630 > 2001:4f8:fff6::21.80: S > 3365633125:3365633125(0) win 50400 <mss 1440,nop,wscale 0,nop,nop,sackOK> > Jun 23 11:27:45.651924 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: S > 2263028161:2263028161(0) ack 3365633126 win 65535 <mss 1220,nop,wscale > 3,sackOK,eol> [class 0xc] [flowlabel 0xad982] > Jun 23 11:27:45.653526 2001:470:26:18f::2.38630 > 2001:4f8:fff6::21.80: . ack > 1 win 51240 > Jun 23 11:27:45.653675 2001:470:26:18f::2.38630 > 2001:4f8:fff6::21.80: P > 1:114(113) ack 1 win 51240 > Jun 23 11:27:45.853698 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: P > 1:246(245) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:45.855206 2001:470:26:18f::2.38630 > 2001:4f8:fff6::21.80: . ack > 246 win 51240 > Jun 23 11:27:45.857788 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 246:1466(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:45.859296 2001:470:26:18f::2.38630 > 2001:4f8:fff6::21.80: . ack > 1466 win 51240 > Jun 23 11:27:46.048448 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 1466:2686(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.052559 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 2686:3906(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.054106 2001:470:26:18f::2.38630 > 2001:4f8:fff6::21.80: . ack > 3906 win 51240 > Jun 23 11:27:46.056284 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 3906:5126(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.060122 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 5126:6346(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.061608 2001:470:26:18f::2.38630 > 2001:4f8:fff6::21.80: . ack > 6346 win 51240 > Jun 23 11:27:46.247042 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 6346:7566(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.251166 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 7566:8786(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.252716 2001:470:26:18f::2.38630 > 2001:4f8:fff6::21.80: . ack > 8786 win 51240 > Jun 23 11:27:46.254966 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 8786:10006(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.259244 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 10006:11226(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.260817 2001:470:26:18f::2.38630 > 2001:4f8:fff6::21.80: . ack > 11226 win 51240 > Jun 23 11:27:46.262994 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 11226:12446(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.266960 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 12446:13666(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.268514 2001:470:26:18f::2.38630 > 2001:4f8:fff6::21.80: . ack > 13666 win 51240 > Jun 23 11:27:46.446224 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 13666:14886(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.449840 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 14886:16106(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.451330 2001:470:26:18f::2.38630 > 2001:4f8:fff6::21.80: . ack > 16106 win 51240 > Jun 23 11:27:46.453915 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 16106:17326(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.457942 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 17326:18546(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.459418 2001:470:26:18f::2.38630 > 2001:4f8:fff6::21.80: . ack > 18546 win 51240 > Jun 23 11:27:46.462050 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 18546:19766(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.465765 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . > 19766:20986(1220) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.467332 2001:470:26:18f::2.38630 > 2001:4f8:fff6::21.80: . ack > 20986 win 51240 > Jun 23 11:27:46.657496 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: P > 20986:21103(117) ack 114 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.659010 2001:470:26:18f::2.38630 > 2001:4f8:fff6::21.80: F > 114:114(0) ack 21103 win 51240 > Jun 23 11:27:46.849407 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: . ack > 115 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.850257 2001:4f8:fff6::21.80 > 2001:470:26:18f::2.38630: F > 21103:21103(0) ack 115 win 8235 [flowlabel 0xad982] > Jun 23 11:27:46.851956 2001:470:26:18f::2.38630 > 2001:4f8:fff6::21.80: . ack > 21104 win 51240 > Jun 23 12:00:34.916628 2001:470:25:18f::2.11013 > > 2001:200:0:8002:203:47ff:fea5:3085.80: S 701478951:701478951(0) win 16384 > <mss 1220,nop,nop,sackOK,nop,wscale 0,nop,nop,timestamp 3136656499 0> > [flowlabel 0x5e908] > Jun 23 12:00:35.254776 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: S 4158042643:4158042643(0) ack 701478952 win 65535 > <mss 1440,nop,wscale 1,nop,nop,timestamp 1778389604 3136656499,sackOK,eol> > [flowlabel 0x5077d] > Jun 23 12:00:35.255168 2001:470:25:18f::2.11013 > > 2001:200:0:8002:203:47ff:fea5:3085.80: . ack 1 win 16384 <nop,nop,timestamp > 3136656500 1778389604> [flowlabel 0x5e908] > Jun 23 12:00:35.257923 2001:470:25:18f::2.11013 > > 2001:200:0:8002:203:47ff:fea5:3085.80: P 1:146(145) ack 1 win 16384 > <nop,nop,timestamp 3136656500 1778389604> [flowlabel 0x5e908] > Jun 23 12:00:35.611600 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: . 1:1209(1208) ack 146 win 33220 <nop,nop,timestamp > 1778389956 3136656500> [flowlabel 0x5077d] > Jun 23 12:00:35.614914 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: . 1209:2417(1208) ack 146 win 33220 > <nop,nop,timestamp 1778389956 3136656500> [flowlabel 0x5077d] > Jun 23 12:00:35.615258 2001:470:25:18f::2.11013 > > 2001:200:0:8002:203:47ff:fea5:3085.80: . ack 2417 win 14290 > <nop,nop,timestamp 3136656500 1778389956> [flowlabel 0x5e908] > Jun 23 12:00:35.959822 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: . 2417:3625(1208) ack 146 win 33220 > <nop,nop,timestamp 1778390304 3136656500> [flowlabel 0x5077d] > Jun 23 12:00:35.960395 2001:470:25:18f::2.11013 > > 2001:200:0:8002:203:47ff:fea5:3085.80: . ack 3625 win 16384 > <nop,nop,timestamp 3136656501 1778390304> [flowlabel 0x5e908] > Jun 23 12:00:35.964443 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: . 3625:4833(1208) ack 146 win 33220 > <nop,nop,timestamp 1778390304 3136656500> [flowlabel 0x5077d] > Jun 23 12:00:35.968336 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: . 4833:6041(1208) ack 146 win 33220 > <nop,nop,timestamp 1778390304 3136656500> [flowlabel 0x5077d] > Jun 23 12:00:35.968696 2001:470:25:18f::2.11013 > > 2001:200:0:8002:203:47ff:fea5:3085.80: . ack 6041 win 15176 > <nop,nop,timestamp 3136656501 1778390304> [flowlabel 0x5e908] > Jun 23 12:00:36.305121 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: . 6041:7249(1208) ack 146 win 33220 > <nop,nop,timestamp 1778390649 3136656501> [flowlabel 0x5077d] > Jun 23 12:00:36.305642 2001:470:25:18f::2.11013 > > 2001:200:0:8002:203:47ff:fea5:3085.80: . ack 7249 win 16384 > <nop,nop,timestamp 3136656502 1778390649> [flowlabel 0x5e908] > Jun 23 12:00:36.309839 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: . 7249:8457(1208) ack 146 win 33220 > <nop,nop,timestamp 1778390649 3136656501> [flowlabel 0x5077d] > Jun 23 12:00:36.313151 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: . 8457:9665(1208) ack 146 win 33220 > <nop,nop,timestamp 1778390655 3136656501> [flowlabel 0x5077d] > Jun 23 12:00:36.313515 2001:470:25:18f::2.11013 > > 2001:200:0:8002:203:47ff:fea5:3085.80: . ack 9665 win 15176 > <nop,nop,timestamp 3136656502 1778390649> [flowlabel 0x5e908] > Jun 23 12:00:36.316801 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: . 9665:10873(1208) ack 146 win 33220 > <nop,nop,timestamp 1778390655 3136656501> [flowlabel 0x5077d] > Jun 23 12:00:36.317330 2001:470:25:18f::2.11013 > > 2001:200:0:8002:203:47ff:fea5:3085.80: . ack 10873 win 16384 > <nop,nop,timestamp 3136656502 1778390655> [flowlabel 0x5e908] > Jun 23 12:00:36.320299 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: . 10873:12081(1208) ack 146 win 33220 > <nop,nop,timestamp 1778390655 3136656501> [flowlabel 0x5077d] > Jun 23 12:00:36.516501 2001:470:25:18f::2.11013 > > 2001:200:0:8002:203:47ff:fea5:3085.80: . ack 12081 win 16384 > <nop,nop,timestamp 3136656502 1778390655> [flowlabel 0x5e908] > Jun 23 12:00:36.650629 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: . 12081:13289(1208) ack 146 win 33220 > <nop,nop,timestamp 1778390995 3136656502> [flowlabel 0x5077d] > Jun 23 12:00:36.654195 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: . 13289:14497(1208) ack 146 win 33220 > <nop,nop,timestamp 1778390995 3136656502> [flowlabel 0x5077d] > Jun 23 12:00:36.654819 2001:470:25:18f::2.11013 > > 2001:200:0:8002:203:47ff:fea5:3085.80: . ack 14497 win 15176 > <nop,nop,timestamp 3136656502 1778390995> [flowlabel 0x5e908] > Jun 23 12:00:36.657061 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: P 14497:15097(600) ack 146 win 33220 > <nop,nop,timestamp 1778391002 3136656502> [flowlabel 0x5077d] > Jun 23 12:00:36.667153 2001:470:25:18f::2.11013 > > 2001:200:0:8002:203:47ff:fea5:3085.80: F 146:146(0) ack 15097 win 16384 > <nop,nop,timestamp 3136656502 1778391002> [flowlabel 0x5e908] > Jun 23 12:00:37.008873 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: . ack 147 win 33220 <nop,nop,timestamp 1778391358 > 3136656502> [flowlabel 0x5077d] > Jun 23 12:00:37.009686 2001:200:0:8002:203:47ff:fea5:3085.80 > > 2001:470:25:18f::2.11013: F 15097:15097(0) ack 147 win 33220 > <nop,nop,timestamp 1778391358 3136656502> [flowlabel 0x5077d] > Jun 23 12:00:37.010048 2001:470:25:18f::2.11013 > > 2001:200:0:8002:203:47ff:fea5:3085.80: . ack 15098 win 16384 > <nop,nop,timestamp 3136656503 1778391358> [flowlabel 0x5e908] > ------------------------------------------successful transfer to kame from > the router----------------------------
