IPFW NAT64 changed 11.2 --> 11.3?

Patrick M. Hausen hausen at punkt.de
Wed Jun 26 12:20:46 UTC 2019


Hi all,

first, for completeness:

> So (3rd line) the SYN/ACK arrives with correct IPv4 addresses then get’s
> forwarded with a source address of 
> 
> 	:200:0:50:e689:9765:7085 instead of 64:ff9b::9765:7085

That looks like random garbage due to an uninitialized struct in6_addr.

> Then we have another SYN/ACK (retransmit, identical sequence number and ACK)
> forwarded with yet another source address:
> 
> 	::151.101.112.133

And on the second turn the same place probably has been zeroed, because that
is the correct IPv4 address with ::/96 attached in front. I didn’t catch that
at first. But the „internal“ IPv6-only system expects NAT64, not v4-compatible ...

Second, Andrey’s patch adds the missing initialization. And yes, it is working. :-)

Kind regards,
Patrick
-- 
punkt.de GmbH			Internet - Dienstleistungen - Beratung
Kaiserallee 13a			Tel.: 0721 9109-0 Fax: -100
76133 Karlsruhe			info at punkt.de	http://punkt.de
AG Mannheim 108285		Gf: Juergen Egeling



More information about the freebsd-net mailing list