On 12/29/12 08:31, Michael Grimm wrote:
> I've been told to change my outgoing rule from ...
>
> | pass out log on $extIF inet6 proto {tcp, udp, icmp6, gre} all modulate state
>
> ... to ...
>
> | pass out log on $extIF inet6 proto {tcp, udp, icmp6, gre} all
>
> ... and that did the trick! No m
On 12/29/2012 08:31 AM, Michael Grimm wrote:
> Hi --
>
> On 29.12.2012, at 13:07, Kimmo Paasiala wrote:
>> On Sat, Dec 29, 2012 at 1:54 PM, CyberLeo Kitsana
>> wrote:
>>> On 12/28/2012 05:59 AM, Michael Grimm wrote:
>
I do run both my primary and secondary nameservers (distinct servers) i
Hi --
On 29.12.2012, at 13:07, Kimmo Paasiala wrote:
> On Sat, Dec 29, 2012 at 1:54 PM, CyberLeo Kitsana
> wrote:
>> On 12/28/2012 05:59 AM, Michael Grimm wrote:
>>> I do run both my primary and secondary nameservers (distinct servers) in
>>> FreeBSD jails1 and jail2 as outlined below:
>>
>>
On Sat, Dec 29, 2012 at 1:54 PM, CyberLeo Kitsana wrote:
> On 12/28/2012 05:59 AM, Michael Grimm wrote:
>> Hi --
>>
>> I do run both my primary and secondary nameservers (distinct servers) in
>> FreeBSD jails1 and jail2 as outlined below:
>
>> I do see using tcpdump at server1:
>>
>> | 00:00:02.
On 12/28/2012 05:59 AM, Michael Grimm wrote:
> Hi --
>
> I do run both my primary and secondary nameservers (distinct servers) in
> FreeBSD jails1 and jail2 as outlined below:
> I do see using tcpdump at server1:
>
> | 00:00:02.066251 xx:xx:xx:xx:xx > yy:yy:yy:yy:yy, ethertype IPv6 (0x86dd),
>
On Saturday December 29 2012 10:48:41 Michael Grimm wrote:
> - Disabling PF at 9.1 allows outgoing tcp6 to 9.1 with enabled PF.
>
> Thus, it seems to me that the pf code in 9.1 is responsible for screwing
> tcp6.
Make sure to have 'scrub reassemble tcp' off:
misc/172648:
pf(4): 'scrub reassemble
Hi --
On 28.12.2012, at 12:59, Michael Grimm wrote:
> But without any success, so, what's going wrong here:
> - Is it my setup regarding pf?
> - Is it my setup in general?
> - Is it a screwed IPv6 routing?
> - Or something else?
What I can say now, is:
- It has nothing to do with my setup rega