IPFW and IPv6 packets with fragment header and last frag only

sthaug at nethelp.no sthaug at nethelp.no
Sun Feb 6 20:50:46 UTC 2011


> > Does anybody have an idea of whether the patch in kern/145733 will be
> > incorporated into ip_fw2.c any time soon?
> 
> That PR is mine.  I've emailed people off list several times (last on
> 25 Jan) but have not made progress.  To say I'm frustrated is an
> understatement.

Getting this fixed is necessary to have FreeBSD ipfw work properly
with IPv6.  As it is, I'm dropping perfectly valid IPv6 traffic on
my name servers, e.g.

% grep 'Feb  5.*Invalid Fragment Header' /var/log/messages | wc -l
      16

Let's see if requests from more people will change things.

And for the FreeBSD committers: What can be done to push a needed
patch along (for those of us without commit privileges)?

Steinar Haug, Nethelp consulting, sthaug at nethelp.no


More information about the freebsd-net mailing list