Broken IPsec + enc +pf/ipfw
Matthew Grooms
mgrooms at shrew.net
Mon Oct 20 20:00:28 UTC 2014
On 10/20/2014 2:47 PM, Andrey V. Elsukov wrote:
> On 20.10.2014 20:18, Matthew Grooms wrote:
>> Lastly, I tried to locate a relevant PR but didn't find anything
>> concrete. Is this related to the issue? And if so, can it be MFCd?
>>
>> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=110959
>
> Did you try the patch from last PR? It is small and should be applicable
> to stable/10.
>
As I mentioned, it's not clear to me if the patch was intended to fix
the issue that I am describing. Is that the case? If so, I would be
happy to apply it and report back. These are production firewalls, so
I'd prefer to have some feedback before calculating that risk.
Thanks,
-Matthew
More information about the freebsd-net
mailing list