Am 28.05.2015 um 16:07 schrieb Andrey V. Elsukov:
Just noticed, you use ip_divert(4). gre(4) uses mbuf_tag to prevent
infinity loop and stack exhausting. When packet goes through ip_divert,
it loses this tag. You need to check your rules and avoid applying
divert rules to GRE packets. Also you can use some netgraph based tcpmss
implementation.

I only pass TCP SYN packets to divert.
This should not affect GRE packets?

ipfw add divert $tcpmssd_port tcp from any to not me setup

Thanks for your GRE module. I will give it a try.

--
Julian
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Reply via email to