[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

bridging strangeness with 3.1 release

Can someone confirm this:

  world <-> router <-> [ne3] openbsd-3.1-box [xl0] <-> internal net

  xl0 ==
  ne3 ==

  bridging enabled between ne3 and xl0

  web server on .24

  packet filter on the box:
    pass in all
    pass out all
    block in on ne3 all

  A connection to .24 port 22 (or any other) succeeds.
  A connection to .19 port 22 (or any other) succeeds.
  Connections to any other machine in the internal networks are 
  blocked as they are supposed to be.

  Further debugging ("pass in log all") showed this:
  Jun 26 07:35:20.717514 rule 2/0(match): pass in on xl0: \ > S 2785884569:2785884569(0) \
     win 5840 <mss 1460,sackOK,timestam

  Note the "xl0" instead of "ne3".

  Exchanging the ip addresses of ne3 and xl0 doesn't change this behaviour.
  Changing the physical order of ne3 and xl0 is out of question at the

I don't think that this is intended behaviour, but i'm a little bit 
tired now and possibly overlooking something.

Openbsd-3.1-release, GENERIC.

Regards, Uwe

OpenBSD 3.1 (GENERIC) #59: Sat Apr 13 15:28:52 MDT 2002
cpu0: AMD K6-III ("AuthenticAMD" 586-class) 401 MHz
real mem  = 268009472 (261728K)
avail mem = 242716672 (237028K)
using 3297 buffers containing 13504512 bytes (13188K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(fd) BIOS, date 08/26/98, BIOS32 rev. 0 @ 0xf0530
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
pcibios0 at bios0: rev. 2.1 @ 0xf0000/0xbe2
pcibios0: PCI IRQ Routing Table rev. 1.0 @ 0xf0b40/160 (8 entries)
pcibios0: PCI Interrupt Router at 000:07:0 ("Acer Labs M1543 PCI-ISA" rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc0000/0x8000 0xc8000/0x4000 0xcc000/0x800
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Acer Labs M1541 Host-PCI" rev 0x04
ppb0 at pci0 dev 1 function 0 "Acer Labs M5243 AGP/PCI-PCI" rev 0x04
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "Matrox MGA G100 AGP" rev 0x02
wsdisplay0 at vga1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
"Acer Labs M7101 Power Mgmt" rev 0x00 at pci0 dev 3 function 0 not configured
pcib0 at pci0 dev 7 function 0 "Acer Labs M1543 PCI-ISA" rev 0xc3
bha3 at pci0 dev 10 function 0 "BusLogic MultiMaster" rev 0x08: irq 12, BusLogic 9xxC SCSI
bha3: model BT-958, firmware 5.07B
bha3: sync, parity
bha3 targ 0: sync, offset 15, period 100nsec
bha3 targ 1: sync, offset 15, period 100nsec
bha3 targ 2: sync, offset 15, period 100nsec
scsibus0 at bha3: 8 targets
sd0 at scsibus0 targ 0 lun 0: <IBM, DDRS-39130D, DC1B> SCSI2 0/direct fixed
sd0: 8715MB, 8387 cyl, 10 head, 212 sec, 512 bytes/sec, 17850000 sec total
sd1 at scsibus0 targ 1 lun 0: <IBM, DCAS-34330W, S67A> SCSI2 0/direct fixed
sd1: 4095MB, 8205 cyl, 6 head, 170 sec, 512 bytes/sec, 8388315 sec total
sd2 at scsibus0 targ 2 lun 0: <IBM, DDRS-34560W, S71D> SCSI2 0/direct fixed
sd2: 4357MB, 8387 cyl, 5 head, 212 sec, 512 bytes/sec, 8925000 sec total
xl0 at pci0 dev 11 function 0 "3Com 3c905C 100Base-TX" rev 0x74: irq 10 address 00:01:02:18:0d:6e
exphy0 at xl0 phy 24: Broadcom 3C905C internal PHY, rev. 6
ne3 at pci0 dev 12 function 0 "Realtek 8029" rev 0x00: irq 11
ne3: address 00:40:33:a1:0c:09
pciide0 at pci0 dev 15 function 0 "Acer Labs M5229 UDMA IDE" rev 0xc1: DMA, channel 0 configured to compatibility, channel 1 configured to compatibility
pciide0: channel 1 ignored (disabled)
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: <PC speaker>
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
biomask 1040 netmask 1c40 ttymask 1cc2
pctr: user-level cycle counter enabled
mtrr: K6-family MTRR support (2 registers)
dkcsum: sd0 matched BIOS disk 80
dkcsum: sd1 matched BIOS disk 81
dkcsum: sd2 matched BIOS disk 82
root on sd0a
rootdev=0x400 rrootdev=0xd00 rawdev=0xd02