Unable to upload to S3 when pf is activated

murdoch.john at moumantai.de murdoch.john at moumantai.de
Mon Dec 14 20:38:53 UTC 2015


Hi Kristof,

yes, the machine runs on Amazon and yes again -tso fixed the problem.

Could I have seen this somehow watching the pf log? Maybe package length?

Thanks you so much. I spent hours tracking this down.

Best,
JOERG



> On 14 Dec 2015, at 21:19, Kristof Provost <kp at FreeBSD.org> wrote:
> 
> 
>> On 14 Dec 2015, at 21:04, murdoch.john at moumantai.de wrote:
>> this might sound as a strange question, but when I activate the PF
>> firewall using a minimal rule set (see below), uploading files to
>> AWS S3 becomes impossible.
> ...
>> I am lost. Anyone any ideas.
> 
> Am I right in assuming that the FreeBSD machine is also running on Amazon?
> 
> There’s a know problem with pf and TSO which manifests (among other places) in EC2 instances.
> It’s actually been fixed in stable/10, so the 10.3 release will have the fix.
> In 10.2 you can work around the problem by disabling TSO (ifconfig foo0 -tso should do the trick).
> 
> See PR 154428, 193579, 198868 for more information.
> 
> Regards,
> Kristof
> _______________________________________________
> freebsd-pf at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe at freebsd.org"



More information about the freebsd-pf mailing list