Re: TCP source port reuse problems

2007-03-04 Thread Mike Silbersack
On Sat, 3 Mar 2007, Peter Jeremy wrote: Disabling net.inet.ip.portrange.randomized appears to work around this but is undesirable for other reasons. I should add that in the short term, that does seem to be the only solution. Fernando Gont has some ideas on how to make port reuse happen le

Re: TCP source port reuse problems

2007-03-04 Thread Mike Silbersack
On Sat, 3 Mar 2007, Peter Jeremy wrote: First problem: FreeBSD appears to be re-using source ports too rapidly. My understanding is that a TCP socket ({src IP, src port, dst IP, dst port} tuple) should not be re-used for 120 seconds after teardown. Sample tcpdumps and IPfilter whinges below

TCP source port reuse problems

2007-03-02 Thread Peter Jeremy
Hi, After upgrading my firewall to FreeBSD 6.2-RELEASE (with IPfilter), I noticed that TCP connections between my firewall and internal hosts (all FreeBSD and mostly 6.2) were randomly dropping out. I've found a variety of anomolies in both FreeBSD and IPfilter and will post about them separately