svn commit: r281164 - head/sys/netpfil/pf

[Kristof Provost]

On 2015-04-07 08:33:17 (+0200), Hans Ottevanger <hans at beastielabs.net> wrote:
> On 04/06/15 21:05, Kristof Provost wrote:
> > Author: kp
> > Date: Mon Apr  6 19:05:00 2015
> > New Revision: 281164
> > URL: https://svnweb.freebsd.org/changeset/base/281164
> >
> > Log:
> >    pf: Skip firewall for refragmented ip6 packets
>
> Is there any chance that this commit and your previous pf and inet6 
> related changes will get MFC'd to 10.1-STABLE. Is it safe or even 
> possible to incorporate these changes myself?
> 
I have no immediate plans to MFC this. There's still a bit of work to be
done and a little more testing as well before I'd be comfortable merging
this back.
For example, I still need to commit https://reviews.freebsd.org/D1815
(although that'll happen soon).
I also think there's at least one other bug, but I'll need some more
time to investigate that.

That said, it is fairly straightforwards to merge these patches back to
10.1. I'm running two stable/10 systems with these patches and I've not
seen any issues yet.

Regards,
Kristof