Re: Stiil a regression with jails/IPv6/pf?

2013-09-02 Thread Ruben van Staveren
Hi, On 31 Aug 2013, at 21:49, Tim Bishop t...@bishnet.net wrote: Hi all, This is regarding kern/170070 and these two threads from last year: http://lists.freebsd.org/pipermail/freebsd-stable/2012-July/068987.html http://lists.freebsd.org/pipermail/freebsd-stable/2012-August/069043.html

Re: Stiil a regression with jails/IPv6/pf?

2013-09-02 Thread Tim Bishop
Hi, On Mon, Sep 02, 2013 at 12:22:11PM +0200, Ruben van Staveren wrote: On 31 Aug 2013, at 21:49, Tim Bishop t...@bishnet.net wrote: This is regarding kern/170070 and these two threads from last year: http://lists.freebsd.org/pipermail/freebsd-stable/2012-July/068987.html

Stiil a regression with jails/IPv6/pf?

2013-08-31 Thread Tim Bishop
Hi all, This is regarding kern/170070 and these two threads from last year: http://lists.freebsd.org/pipermail/freebsd-stable/2012-July/068987.html http://lists.freebsd.org/pipermail/freebsd-stable/2012-August/069043.html I'm running stable/9 r255017 and I'm seeing the same issue, even with the

Re: Regression with jails/IPv6/pf

2012-08-01 Thread Bjoern A. Zeeb
On Thu, 26 Jul 2012, Matthew Seaman wrote: Hi, as there have been more people having problems with pf and IPv6 after the changes I am replying to stable@ cc: pf@. ... [...] nat on $ext_if_plus from $xenophobe_int to any - $xenophobe_ext rdr inet6 proto tcp from localnets to $xenophobe_ext \

Re: Regression with jails/IPv6/pf

2012-08-01 Thread Matthew Seaman
On 01/08/2012 18:13, Bjoern A. Zeeb wrote: Any of you who are expereincing problems with packets dropped due to invalid checksums with IPv6 and pf after the recent merges, can you report back if you also see this without modulate state in your pf.conf (if you have 'modulate' in there, can you

Re: Regression with jails/IPv6/pf

2012-08-01 Thread Bjoern A. Zeeb
On Wed, 1 Aug 2012, Matthew Seaman wrote: On 01/08/2012 18:13, Bjoern A. Zeeb wrote: Any of you who are expereincing problems with packets dropped due to invalid checksums with IPv6 and pf after the recent merges, can you report back if you also see this without modulate state in your pf.conf

Re: Regression with jails/IPv6/pf

2012-07-31 Thread Harald Schmalzbauer
schrieb Bjoern A. Zeeb am 29.07.2012 01:02 (localtime): On Thu, 26 Jul 2012, Matthew Seaman wrote: Just for the public; I am talking to him privately currently; I'll summarize findings either here or in a commit message. Thanks for the info! Any news worth to share? Best regards, -Harry

Re: Regression with jails/IPv6/pf

2012-07-28 Thread Bjoern A. Zeeb
On Thu, 26 Jul 2012, Matthew Seaman wrote: Just for the public; I am talking to him privately currently; I'll summarize findings either here or in a commit message. /bz -- Bjoern A. Zeeb You have to have visions! Stop bit received. Insert coin for new

Regression with jails/IPv6/pf

2012-07-26 Thread Matthew Seaman
So, I tried to do a routine update to the latest stable/9 yesterday (r238771), and I found that access to the jail on my server had stopped working. Everything else seemed to be fine, and reverting to the previous system (r237456 from 2012-06-22 (Boot Environments FTW)) bought it all back to

Re: Regression with jails/IPv6/pf

2012-07-26 Thread Mike Andrews
On 7/26/2012 2:45 PM, Matthew Seaman wrote: So, I tried to do a routine update to the latest stable/9 yesterday (r238771), and I found that access to the jail on my server had stopped working. Everything else seemed to be fine, and reverting to the previous system (r237456 from 2012-06-22 (Boot

Re: Regression with jails/IPv6/pf

2012-07-26 Thread Matthew Seaman
On 26/07/2012 21:51, Mike Andrews wrote: Sounds like what I hit and filed kern/170070 on -- basically a host not being able to talk to itself on IPv6, except on the ::1 address. Workaround: ifconfig lo0 -txcsum6 -rxcsum6 or in /etc/rc.conf: ifconfig_lo0=inet 127.0.0.1/8 -txcsum6