[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipfilter
Subject:    Re: ipfilter keep state bug
From:       Hauke Fath <hauke () Espresso ! Rhein-Neckar ! DE>
Date:       2006-07-28 17:19:21
Message-ID: l03102801c0eff56fa8dc () q840 ! causeuse ! org
[Download RAW message or body]

At 17:43 Uhr +0800 21.7.2006, Kim Leng Goh wrote:
>  Just to feedback that I'm still experiencing the "keep state" bug
>filed at http://mail-index.netbsd.org/netbsd-bugs/2004/10/06/0004.html

The complete PR is here:
http://www.NetBSD.org/cgi-bin/query-pr-single.pl?number=27164 (I had
accidentally marked it as confidential).

>I'm using ip_fil4.1.13.tar.gz on a Solaris 8. Instead of netbsd in the
>bug report above, the nfs clients I experienced the bug on are redhat
>9.0 and RHEL ES release 3.

We see similar things again with ipfilter 4.1.6 (as shipped with NetBSD 3)
on the router, and connections between Linux 2.6.x clients and servers.
Problems showed up in nfs, exclusively; typically by imap daemon processes
hanging on access to nfs mounted mailboxes.

The "workaround" was, as in the case of PR 27164, to make the path from/to
the linux machines stateless - which renders ipfilter a lot less useful.

	hauke


--
"It's never straight up and down"     (DEVO)


[prev in list] [next in list] [prev in thread] [next in thread]