Connections not purged on address deletion

[Prabhu Hariharan]

Thanks for the reply.  I think, atleast system should have some
option/sysctl (without individual firewall rules) to enable the purging of
connections which are simply dormant when address get removed (not intended
to move address to other interface).


On Fri, Feb 4, 2011 at 4:42 PM, Julian Elischer <julian at freebsd.org> wrote:

> On 2/4/11 4:03 PM, Prabhu Hariharan wrote:
>
>> Hi,
>>
>> When I delete an IP-address from an interface, the TCP (and other)
>> connections using that local IP-address are not getting purged.  The
>> telnet
>> or ssh sessions on the other end just get hung, as FreeBSD
>> address-deletion
>> doesn't handle this situation and fails to call pfctlinput() to notify
>> protocols on this event.  The TCP connections simply linger in the system
>> and takes it due course on TCP timers to free those inpcbs.
>>
>> tcp4       0      0 30.30.30.31.22         30.30.30.30.58796
>>  ESTABLISHED
>>
>> Is this by design?  Or any significance on relying on applications
>> intelligently to do timeouts, without a notification from network layer?
>>
>
> theoretically if you move the address to another interface it should start
> working again assuming the routing is correct.
> It's mostly by design.   If you want to get rid of them you might try to
> add a firewall rule to send them resets.
> I don't know what other systems do.
>
>  Thanks,
>> Prabhu H
>> _______________________________________________
>> freebsd-net at freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-net
>> To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"
>>
>>
>