netdev - Re: strange routing issue--packets stop getting forwarded for a live connection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4E50BDFB.7050502@fatooh.org>
Date:	Sun, 21 Aug 2011 01:12:43 -0700
From:	Corey Hickey <bugfood-ml@...ooh.org>
To:	Julian Anastasov <ja@....bg>
CC:	Linux Netdev List <netdev@...r.kernel.org>
Subject: Re: strange routing issue--packets stop getting forwarded for a live
 connection

On 2011-08-20 23:35, Julian Anastasov wrote:
>> I have a strange issue where, reliably, certain conditions cause my
>> Linux router to stop forwarding packets for a connection.

[...]

>> 3. MTU size; 1500 on eth0 and 1406 on tun0. Bigger packets have been
>> transferred fine.
> 
> 	Lower MTU, it can be PMTUD problem. At 04:50:24.112658
> I see 7801:9169 is 1420 bytes and no ICMP FRAG NEEDED is generated.
> May be these two regressions explain it:
> 
> http://marc.info/?l=linux-netdev&m=131342172722536&w=2
> 
> 	There are 2 fixes you can try or more recent kernel
> tree, for example 3.1-rc2 has the fixes.

Many thanks for your reply--it looks like you're on to something. You
didn't specify which interface to lower the MTU on, so I tried them each
in turn, and found that lowering the MTU on the client machine to 1406
(matching tun0 on the router) did indeed solve the problem. That makes
sense in retrospect.

It's a bit late at night for me to be patching my kernel, but I'll see
if I can do it tomorrow.

Thanks again, and I'll let you know how it turns out.

-Corey
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html