0000356: Answering ARP with invalid response when queried by firewall

(0000441)
tbrown9
08-27-05 10:34

Would you elaborate on the workaround that you did on the TZ170? Where do you make the SAT entry?

(0000471)
wphelps
08-29-05 23:22

Using the web GUI of the TZ, go to the network ARP table; in addition to viewing, one can add entries. Also, I seem to be having a similar problem with a W2K3 server directly behind the bridge instead of the TZ; I hope to find a fix later today.

(0000526)
bernhardf
09-14-05 07:46

How does busybox come into play with this?

The arp table is supposedly maintained by the kernel, no?

Please describe what *exact* busybox commands are involved to reproduce this issue.

thanks,

This sounds like a duplicate of bug 154 and 356 or vice versa.

(0000530)
wphelps
09-14-05 11:19

Answering inline:
>How does busybox come into play with this?
>The arp table is supposedly maintained by the kernel, no?

The problem is most likely not that anything in the code is outright wrong, but that choices in the compiling and packaging of busybox cause issues

(0000535)
vapier
09-14-05 18:44

so are you saying that a 'normal' linux box, one with standard utilities from iputils/etc... work fine with the same kernel ?

the point bernhardf is trying to make is that busybox does not have an arpd server, so any sort of communication which uses the busybox machine as a router/gateway is done all through the kernel

(0000539)
wphelps
09-16-05 10:22

Yes, that is exactly what I am saying. Now the task is to work through the long list of options and differences to see which one causes the behavior.

(0000542)
bernhardf
09-17-05 03:27

Please close bugs 154 and 356. -EINAPPROPRIATE

They are not related to busybox.

(0000544)
wphelps
09-17-05 09:01

Why is compilation and configuration of BusyBox not related to BusyBox?

(0000731)
landley
12-07-05 19:53

Sorry for the delay in replying to this, but I don't think anybody knew what you were talking about. Bridging is a kernel function, as is replying to ARP requests. The closest busybox has is a command that sends arp ping requests. Your system may have had busybox on it, but this really sounds like a kernel issue. (And you didn't give us a reproduction sequence.)

If you want to follow up on this, please use the busybox mailing list (busybox@busybox.net) for much faster turnaround times. :)

Rob

Issue History
Date Modified	Username	Field	Change
07-25-05 22:52	wphelps	New Issue
07-25-05 22:52	wphelps	Status	new => assigned
07-25-05 22:52	wphelps	Assigned To	=> BusyBox
08-27-05 10:34	tbrown9	Note Added: 0000441
08-29-05 23:22	wphelps	Note Added: 0000471
09-14-05 07:46	bernhardf	Note Added: 0000526
09-14-05 11:19	wphelps	Note Added: 0000530
09-14-05 18:44	vapier	Note Added: 0000535
09-16-05 10:22	wphelps	Note Added: 0000539
09-17-05 03:27	bernhardf	Note Added: 0000542
09-17-05 09:01	wphelps	Note Added: 0000544
12-07-05 19:53	landley	Note Added: 0000731
12-07-05 19:54	landley	Status	assigned => closed
12-07-05 19:54	landley	Resolution	open => unable to reproduce

Notes
(0000441) tbrown9 08-27-05 10:34	Would you elaborate on the workaround that you did on the TZ170? Where do you make the SAT entry?

(0000471) wphelps 08-29-05 23:22	Using the web GUI of the TZ, go to the network ARP table; in addition to viewing, one can add entries. Also, I seem to be having a similar problem with a W2K3 server directly behind the bridge instead of the TZ; I hope to find a fix later today.

(0000526) bernhardf 09-14-05 07:46	How does busybox come into play with this? The arp table is supposedly maintained by the kernel, no? Please describe what exact busybox commands are involved to reproduce this issue. thanks, This sounds like a duplicate of bug 154 and 356 or vice versa.

(0000530) wphelps 09-14-05 11:19	Answering inline: >How does busybox come into play with this? >The arp table is supposedly maintained by the kernel, no? The problem is most likely not that anything in the code is outright wrong, but that choices in the compiling and packaging of busybox cause issues

(0000535) vapier 09-14-05 18:44	so are you saying that a 'normal' linux box, one with standard utilities from iputils/etc... work fine with the same kernel ? the point bernhardf is trying to make is that busybox does not have an arpd server, so any sort of communication which uses the busybox machine as a router/gateway is done all through the kernel

(0000539) wphelps 09-16-05 10:22	Yes, that is exactly what I am saying. Now the task is to work through the long list of options and differences to see which one causes the behavior.

(0000542) bernhardf 09-17-05 03:27	Please close bugs 154 and 356. -EINAPPROPRIATE They are not related to busybox.

(0000544) wphelps 09-17-05 09:01	Why is compilation and configuration of BusyBox not related to BusyBox?

(0000731) landley 12-07-05 19:53	Sorry for the delay in replying to this, but I don't think anybody knew what you were talking about. Bridging is a kernel function, as is replying to ARP requests. The closest busybox has is a command that sends arp ping requests. Your system may have had busybox on it, but this really sounds like a kernel issue. (And you didn't give us a reproduction sequence.) If you want to follow up on this, please use the busybox mailing list (busybox@busybox.net) for much faster turnaround times. :) Rob

Relationships