Generating 'Fragment Needed but DF was Set' ICMP & Dummynet

Max Laier max at
Mon Feb 23 09:07:35 PST 2004

On Monday 23 February 2004 17:25, Alexander Motin wrote:
> Here are my patches for this problem for FreeBSD 4.8 and 5.2.
> Review them please.

Looks good, though you might want to make sure to update statistics 
(ipstat.ips_cantfrag++). And maybe lose the type and code vars - you 
don't really use them:
-                       type = ICMP_UNREACH;
-                       code = ICMP_UNREACH_HOST;
-                       icmp_error(mcopy, type, code, 0, pkt->ifp);
+			icmp_error(mcopy, ICMP_UNREACH, ICMP_UNREACH_HOST,
+			    0, pkt->ifp);

Also note that this patch will require some work after the MT_TAG remove as pkt is freed with 
the mbuf. I'll keep it in mind.

Best regards,				| mlaier at
Max Laier				| ICQ #67774661	| mlaier at EFnet

More information about the freebsd-ipfw mailing list