Re: TCP ISN algorithm breaks TIME_WAIT (Re: select fails to return incoming connect on FreeBSD-4.3)

2001-07-16 Thread Niels Provos
In message <[EMAIL PROTECTED]>, Kris Kennaway writes: >Sorry I've been ignoring this; I'm still getting caught up from my >vacation. Niels, how has OpenBSD handled this? Not. We have the same problem. I argue that the test is bogus. First of all, if we are getting a SYN for this 4-tuple, it is

Re: TCP ISN algorithm breaks TIME_WAIT (Re: select fails to return incoming connect on FreeBSD-4.3)

2001-07-16 Thread Kris Kennaway
On Mon, Jul 16, 2001 at 11:00:04AM +0300, Ruslan Ermilov wrote: > Recall my question on IRC about monotonicity right after you committed > this? Yes; recall my answer? :) Kris PGP signature

Re: TCP ISN algorithm breaks TIME_WAIT (Re: select fails to return incoming connect on FreeBSD-4.3)

2001-07-16 Thread Ruslan Ermilov
On Sun, Jul 15, 2001 at 01:11:48PM -0700, Kris Kennaway wrote: > On Mon, Jun 11, 2001 at 02:37:10PM -0500, Jonathan Lemon wrote: > > In article >[EMAIL PROTECTED]> you write: > > >First off, I hope this is the right list. > > > > > >Could someone take a look at PR misc/27880? > > > > This was br

TCP ISN algorithm breaks TIME_WAIT (Re: select fails to return incoming connect on FreeBSD-4.3)

2001-07-15 Thread Kris Kennaway
On Mon, Jun 11, 2001 at 02:37:10PM -0500, Jonathan Lemon wrote: > In article >[EMAIL PROTECTED]> you write: > >First off, I hope this is the right list. > > > >Could someone take a look at PR misc/27880? > > This was broken by the initial sequence number patch to TCP. > > When the server closes

Re: select fails to return incoming connect on FreeBSD-4.3

2001-07-02 Thread Mike Silbersack
On Mon, 2 Jul 2001, Glenn Johnson wrote: > I just tested this and it looks fine to me. It gets the sample code in > PR misc/27880 working and more importantly it gets PBS (Portable Batch > System) working again. Once this is merged into 4.3-STABLE I will send > a message to the pbs mail list t

Re: select fails to return incoming connect on FreeBSD-4.3

2001-07-02 Thread Glenn Johnson
On Sun, Jul 01, 2001 at 09:45:47PM -0500, Mike Silbersack wrote: > On Wed, 27 Jun 2001, Jonathan Lemon wrote: > > > I don't object; while the security provided by the new scheme is > > nice, breaking TIME_WAIT assassination is a serious bug in some > > environments, and there should be a way to w

Re: select fails to return incoming connect on FreeBSD-4.3

2001-07-01 Thread Mike Silbersack
On Wed, 27 Jun 2001, Jonathan Lemon wrote: > I don't object; while the security provided by the new scheme is nice, > breaking TIME_WAIT assassination is a serious bug in some environments, > and there should be a way to work around it now. > -- > Jonathan Ok, attached is a patch for 4.3-stable

Re: select fails to return incoming connect on FreeBSD-4.3

2001-06-27 Thread Mike Silbersack
On Wed, 27 Jun 2001, Jonathan Lemon wrote: > I don't object; while the security provided by the new scheme is nice, > breaking TIME_WAIT assassination is a serious bug in some environments, > and there should be a way to work around it now. > -- > Jonathan Ok, I'll whip together a patch and sen

Re: select fails to return incoming connect on FreeBSD-4.3

2001-06-27 Thread Jonathan Lemon
On Wed, Jun 27, 2001 at 03:00:31PM -0500, Mike Silbersack wrote: > > On Wed, 27 Jun 2001, Glenn Johnson wrote: > > > Has anyone had a chance to look at this and figure out what the fix > > might be? > > > > Thanks. > > > > -- > > Glenn Johnson > > It's a feature, not a bug. :) > > Since everyo

Re: select fails to return incoming connect on FreeBSD-4.3

2001-06-27 Thread Mike Silbersack
On Wed, 27 Jun 2001, Glenn Johnson wrote: > On Wed, Jun 27, 2001 at 03:00:31PM -0500, Mike Silbersack wrote: > > > It's a feature, not a bug. :) > > > > Since everyone's on vacation and we can't switch generation schemes > > right now, I've e-mailed kris and asked if he objects to me adding a >

Re: select fails to return incoming connect on FreeBSD-4.3

2001-06-27 Thread Glenn Johnson
On Wed, Jun 27, 2001 at 03:00:31PM -0500, Mike Silbersack wrote: > On Wed, 27 Jun 2001, Glenn Johnson wrote: > > > Has anyone had a chance to look at this and figure out what the fix > > might be? > > > > Thanks. > > It's a feature, not a bug. :) > > Since everyone's on vacation and we can't swi

Re: select fails to return incoming connect on FreeBSD-4.3

2001-06-27 Thread Mike Silbersack
On Wed, 27 Jun 2001, Glenn Johnson wrote: > Has anyone had a chance to look at this and figure out what the fix > might be? > > Thanks. > > -- > Glenn Johnson It's a feature, not a bug. :) Since everyone's on vacation and we can't switch generation schemes right now, I've e-mailed kris and ask

Re: select fails to return incoming connect on FreeBSD-4.3

2001-06-27 Thread Glenn Johnson
On Mon, Jun 11, 2001 at 02:37:10PM -0500, Jonathan Lemon wrote: > >Could someone take a look at PR misc/27880? > > This was broken by the initial sequence number patch to TCP. > > When the server closes the socket, it puts the entry into the > TIME_WAIT state. When a new SYN is received from the

Re: select fails to return incoming connect on FreeBSD-4.3

2001-06-11 Thread Jonathan Lemon
In article [EMAIL PROTECTED]> you write: >First off, I hope this is the right list. > >Could someone take a look at PR misc/27880? This was broken by the initial sequence number patch to TCP. When the server closes the socket, it puts the entry into the TIME_WAIT state. When a new SYN is rece

select fails to return incoming connect on FreeBSD-4.3

2001-06-11 Thread Glenn Johnson
First off, I hope this is the right list. Could someone take a look at PR misc/27880? This PR was submitted by someone who works for Veridian, who produce PBS, the Portable Batch System (http://www.openpbs.org). PBS worked fine on FreeBSD 4.2 but is broken on FreeBSD 4.3. The author of the PR