Re: Kern/73129 and 5.3-STABLE

From: Gleb Smirnoff (glebius_at_freebsd.org)
Date: 02/10/05

  • Next message: Andre Oppermann: "Re: Kern/73129 and 5.3-STABLE" 
    Date: Thu, 10 Feb 2005 13:19:32 +0300
To: Andre Oppermann <oppermann@networx.ch>

    On Wed, Feb 09, 2005 at 09:48:18PM +0100, Andre Oppermann wrote:
    A> The problem is with locally generated packets which go the wrong way.
    A> This gets nasty when the box has to generate some path MTU discovery
    A> ICMP message and such. What I implemented is the correct thing to do
    A> and prevents foot-shooting. On the other hand it prevents people from
    A> forwarding local ports and such. Both sides of the coin have merit
    A> and there is no easy deciding between them or obvious right or wrong
    A> choice.

    If it will fix said PR but break forwarding of local ports, then this is
    not acceptable. In this case we will have another PRs in short period.
    All functionality in ipfw fwd must remain present. 

    -- 
Totus tuus, Glebius.
GLEBIUS-RIPN GLEB-RIPE
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
  • Next message: Andre Oppermann: "Re: Kern/73129 and 5.3-STABLE"

    Relevant Pages

    • Re: Kern/73129 and 5.3-STABLE
      ... > A> The problem is with locally generated packets which go the wrong way. ... > A> This gets nasty when the box has to generate some path MTU discovery ... > A> forwarding local ports and such. ...
      (freebsd-net)
    • Re: Kern/73129 and 5.3-STABLE
      ... A>> A> The problem is with locally generated packets which go the wrong way. ... A>> A> This gets nasty when the box has to generate some path MTU discovery ... A>> A> forwarding local ports and such. ...
      (freebsd-net)