Mac behind a pf firewall

[Christian Edward Gruber]

Maybe I do have that problem.  If something got stalled, I just went  
to  the activity monitor and killed it.  The activity restarted and  
worked like a charm.   It's probably important to note that I have  
that problem with courier even when I'm on the road (outside the pf  
zone), so I assumed it was courier.

Christian.

On 5-Feb-08, at 04:47 , Axel Rau wrote:

>
> Am 04.02.2008 um 19:44 schrieb Christian Edward Gruber:
>
>> That's my setup and I have no problems with this.
>>
>> Mail.app -----> OpenBSD 4.1 pf -----> courier-imap mailserver
> Similar setup with me. It happened with courier-imap and now with  
> archiveopteryx.
>>
>>
>> Does restarting your Mail.app end up working?
> Yes, mostly. It happens, if you have some long lasting IMAP  
> activity, like scanning big mailbox trees or copying hundreds of  
> mails.
>
> In the activity monitor of Mail, those links show up as stalled.
>
> Could you try to reproduce it?
>
> tcpdump shows that Mail issues a TCP FIN but receives some more data  
> messages before the FIN from the server. This is legal but seems not  
> to be liked by
> Mail, so it issues a RST. This reset has the wrong sequence number  
> and ist refused by the firewall.
> The TCP stack problem is bug #5008062 (2007-02-19).
>
> I can't believe that I'm the only site with Apple IMAP clients  
> behind a pf firewall, seeing this problem.
>
> By the way, with thunderbird I don't see these RSTs.
>
> Axel
> ---------------------------------------------------------------------
> Axel Rau, ☀Frankfurt , Germany                       +49 69 9514 18  
> 0
>
>