From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-we0-f169.google.com (mail-we0-f169.google.com [74.125.82.169]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id B08D321F17F for ; Fri, 4 Jan 2013 14:49:33 -0800 (PST) Received: by mail-we0-f169.google.com with SMTP id t49so8400474wey.28 for ; Fri, 04 Jan 2013 14:49:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:user-agent:mime-version:to:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=l/fuUsOKt1wknXppPxT3oSSrCIUimgqb1zxo6/tcVvQ=; b=exuGGWRe2XKL8lQWhb+4hbg0kL1mC5Fj/BdCIC7i7GE4fhh9EYHn/VVvkl/7IenFiL FoiKFIKYr3Fnpnj9l9CBfspvwtzETPdDlger0u7JPnpem2+mN8epoxWRcShhKFT/zboL 6dJtBW6OD0Y83+k/Cr3HhnWlUeHU06N1RUM+k5/87RTxTv/X/jl2NcEWBDBTMoMAr6z3 yDjaxZnRnMuyouatH5/5ITIVqdyy4an1GdeMVym1rUvOkkJFu/WNFgighuRUmCFNq2Di 48t9wTfTJXQDA53UjFJ9ha6XXIaGH35q+Y+N7QzjF54fU0d24lIvX0Tyq3MZ5LkFVRk0 UNSw== X-Received: by 10.180.88.138 with SMTP id bg10mr75426wib.13.1357339771944; Fri, 04 Jan 2013 14:49:31 -0800 (PST) Received: from ?IPv6:2001:470:6aac:3::2aa7:14c? ([2001:470:6aac:3::2aa7:14c]) by mx.google.com with ESMTPS id bw9sm1065958wib.5.2013.01.04.14.49.31 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 04 Jan 2013 14:49:31 -0800 (PST) Message-ID: <50E75C7A.3000606@gmail.com> Date: Fri, 04 Jan 2013 22:49:30 +0000 From: Robert Bradley User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: cerowrt-devel References: <1357333261.187724652@apps.rackspace.com> In-Reply-To: <1357333261.187724652@apps.rackspace.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [Cerowrt-devel] TFO crashes cerowrt 3.7.1-1 X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Jan 2013 22:49:34 -0000 On 04/01/13 21:01, dpreed@reed.com wrote: > Is this a TFO where the endpoint is on cerowrt, or just a SYN+DATA for a non cerowrt destination? > > I was looking at the firewall rules, and they are pretty complicated. Perhaps the SYN+DATA triggers a strange firewall behavior (a loop?) SYN's are special to firewalls, as we know. > I'm wondering if it could be an issue with the NAT or connection-tracking code somehow not coping with the TFO options. -- Robert Bradley