[Bug 216867] IPFW workstation rules block DNSSEC resulting in DNS failure on freebsd.org domains

[Michael Sierchio]

On Tue, Mar 7, 2017 at 9:43 AM, Ian Smith <smithi at nimnet.asn.au> wrote:

However, looking at the review patch, I do wonder if the reass shouldn't
> precede, rather than follow, the check-state?
>
>
Absolutely, yes - fragments don't carry sub-protocol info.


-- 
"Well," Brahma said, "even after ten thousand explanations, a fool is no
wiser, but an intelligent person requires only two thousand five hundred."

- The Mahābhārata