[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-12 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 Brooks Davis changed: What|Removed |Added CC|freebsd-amd64@FreeBSD.org |bro...@freebsd.org --- Comment #16

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-12 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 --- Comment #15 from George V. Neville-Neil --- Have you/can you test this on HEAD? -- You are receiving this mail because: You are on the CC list for the bug. ___ freebsd-amd64@freebsd.org mail

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-12 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 --- Comment #14 from George V. Neville-Neil --- Thanks for all the updates, this does help to track some of this down. A few more questions: If you are not using an Android client does everything just work? In your last test did you also

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 --- Comment #13 from g_amana...@yahoo.com --- Created attachment 166886 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=166886&action=edit tcpdump.txt I did a tcpdump while an android client tries to access a webpage (www.gutefrag

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 --- Comment #12 from g_amana...@yahoo.com --- I did some thorough testing with a simplified IPFW ruleset (only in-kernel NAT enabled and allow everything on the local and WAN interfaces). Enabling "net.inet.ip.fastforwarding" in kernels befo

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 --- Comment #11 from g_amana...@yahoo.com --- I tried with IPSEC_NAT_T and VIMAGE disabled and it doesn't resolve it. -- You are receiving this mail because: You are on the CC list for the bug. _

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 --- Comment #10 from g_amana...@yahoo.com --- Created attachment 166885 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=166885&action=edit netstat.txt Output of "netstat -s" attached. In the local network the problem concerns prim

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 --- Comment #9 from George V. Neville-Neil --- Can you try this without VIMAGE, and then possibly without IPSEC_NAT_T and tell me if the problem persists? Also, can you share the output of netstat -s for all protocols including tcp, esp, a

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-11 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 --- Comment #8 from g_amana...@yahoo.com --- Kernels before this commit (e.g. r295264) with "net.inet.ip.fastforwarding=1" do not exhibit this symptoms. -- You are receiving this mail because: You are on the CC list for the bug. __

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-10 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 Mark Linimon changed: What|Removed |Added Keywords||regression -- You are receiving th

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-10 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 Mark Linimon changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org|g...@freebsd.org --- Comment #7 fro

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-10 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 --- Comment #5 from mgro...@shrew.net --- I see. They underlying cause is quite possibly unrelated then. As I said, I wasn't trying to hijack your bug report. But the symptom still sounds similar in the respect that some of your UDP traffic

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-10 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 --- Comment #6 from mgro...@shrew.net --- Doah, sorry. I stopped and started writing that last paragraph while in the middle of something else. I was still thinking of things in terms of tunneling. Please disregard and I'll go away and be qu

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-10 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 --- Comment #4 from g_amana...@yahoo.com --- (In reply to mgrooms from comment #3) This issue concerns only 10.2-STABLE (now 10.3-BETA1) which is about to become 10.3-RELEASE. The commit has not been applied to 10.2-RELEASE, so you must be f

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-10 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 mgro...@shrew.net changed: What|Removed |Added CC||mgro...@shrew.net --- Comment #

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-10 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 --- Comment #2 from g_amana...@yahoo.com --- Also I just figured out that my Android devices which connect directly to the gateway running the OpenVPN server (they connect to the internal interface and not through OpenVPN) are not able to op

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-10 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 --- Comment #1 from g_amana...@yahoo.com --- Created attachment 166845 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=166845&action=edit client.conf -- You are receiving this mail because: You are on the CC list for the bug. ___

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-10 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 Bug ID: 207087 Summary: kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality Product: Base System Version: 10.2-STABLE Hardware: amd64 OS: Any

[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

2016-02-10 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087 g_amana...@yahoo.com changed: What|Removed |Added CC||a...@freebsd.org,