From plm@smtp3.xs4all.nl  Thu Apr 30 13:17:13 1998
Received: from smtp3.xs4all.nl (smtp3.xs4all.nl [194.109.6.53])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA12577
          for <FreeBSD-gnats-submit@freebsd.org>; Thu, 30 Apr 1998 13:17:12 -0700 (PDT)
          (envelope-from plm@smtp3.xs4all.nl)
Received: from localhost. (asd2k-isdn03-21.dial.xs4all.nl [194.109.200.86])
	by smtp3.xs4all.nl (8.8.8/8.8.8) with ESMTP id WAA06659
	for <FreeBSD-gnats-submit@freebsd.org>; Thu, 30 Apr 1998 22:17:04 +0200 (CEST)
Received: (from plm@localhost)
	by localhost. (8.8.8/8.8.8) id UAA00584;
	Thu, 30 Apr 1998 20:51:09 +0200 (MET DST)
	(envelope-from plm)
Message-Id: <199804301851.UAA00584@localhost.>
Date: Thu, 30 Apr 1998 20:51:09 +0200 (MET DST)
From: plm@xs4all.nl
To: FreeBSD-gnats-submit@freebsd.org
Subject: ppp: aliasing & dial-on-demand problem
X-Send-Pr-Version: 3.2

>Number:         6470
>Category:       bin
>Synopsis:       aliasing & dial-on-demand creates unnecessary dialing
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    brian
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Apr 30 13:20:00 PDT 1998
>Closed-Date:    Sat Jun 27 07:31:42 PDT 1998
>Last-Modified:  Sat Jun 27 07:34:46 PDT 1998
>Originator:     Peter Mutsaers
>Release:        FreeBSD 3.0-CURRENT i386
>Organization:
>Environment:

Current, ppp from -current at 7 february

>Description:

When I was connected, using dial on demand, a nubmer of connections
(WEB browsing) were set up and closed. From /var/log/alias.log:
icmp=4, udp=103, tcp=5, frag_id=0 frag_ptr=0 / tot=112  (sock=0)
icmp=4, udp=104, tcp=5, frag_id=0 frag_ptr=0 / tot=113  (sock=0)
icmp=4, udp=105, tcp=5, frag_id=0 frag_ptr=0 / tot=114  (sock=0)
icmp=4, udp=106, tcp=5, frag_id=0 frag_ptr=0 / tot=115  (sock=0)

Then the connection was closed.

Somewhat later, the remembered connections were released by ppp:
icmp=3, udp=100, tcp=4, frag_id=0 frag_ptr=0 / tot=107  (sock=0)
icmp=3, udp=99, tcp=4, frag_id=0 frag_ptr=0 / tot=106  (sock=0)
icmp=3, udp=98, tcp=4, frag_id=0 frag_ptr=0 / tot=105  (sock=0)
....
icmp=3, udp=59, tcp=4, frag_id=0 frag_ptr=0 / tot=66  (sock=0)
icmp=3, udp=58, tcp=4, frag_id=0 frag_ptr=0 / tot=65  (sock=0)
icmp=3, udp=58, tcp=3, frag_id=0 frag_ptr=0 / tot=64  (sock=0)
icmp=3, udp=57, tcp=3, frag_id=0 frag_ptr=0 / tot=63  (sock=0)

During this process (forgetting the connections by the ppp 
aliasing) the dial on demand was triggered again. I didn't
trace why, but probably because of DNS lookups?

>How-To-Repeat:

Configure aliasing and dial on demand.
Do some WWW browsing. Then close the ppp dialup connection.
Wait a while.

>Fix:
	
	

>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->feedback 
State-Changed-By: brian 
State-Changed-When: Thu Apr 30 18:18:42 PDT 1998 
State-Changed-Why:  
Can the originator use tcpdump or ppp tcp/ip logging to determine 
what's causing the dial ?  If it's caused by some SYN packets, 
then it's about to be fixed :-) 


Responsible-Changed-From-To: freebsd-bugs->brian 
Responsible-Changed-By: brian 
Responsible-Changed-When: Thu Apr 30 18:18:42 PDT 1998 
Responsible-Changed-Why:  
Ppp's mine 
State-Changed-From-To: feedback->closed 
State-Changed-By: brian 
State-Changed-When: Sat Jun 27 07:31:42 PDT 1998 
State-Changed-Why:  
timed out in feedback state. 
The originator may be interested in the latest SYN and FINRST keywords 
in the filter rules in -current or http://www.Awfulhak.org/ppp.html 
>Unformatted:
