Subject: Re: [Fwd: [Bug 3397] New: Network connections hang going through an OpenBSD firewall]

From: "David S. Miller" <[email-masked]>
Date: Tue, 14 Sep 2004 14:19:17 -0700

On Tue, 14 Sep 2004 15:09:50 -0600
Vladimir <[email-masked]> wrote:

> > Is the OpenBSD mangling the packet in any way?
> 
> It is certainly possible but everything works fine with all other OSes 
> and kernels 2.6.5 and below which leads me to believe something was 
> changed in 2.6.6 that broke it.
> 
> Are you able to reproduce it ?

OpenBSD packet filter is busted, and the maintainer of
it claims this is not a bug.

That changes in 2.6.6 didn't "break" things, it enabled a
feature in TCP that OpenBSD stateless TCP connection tracking
cannot handle, and old TCP feature in fact, window scaling.

See here for more info:

http://lwn.net/Articles/92727/