Kern/73129 and 5.3-STABLE

Andre Oppermann oppermann at networx.ch
Thu Feb 10 02:27:36 PST 2005


Gleb Smirnoff wrote:
> 
> On Wed, Feb 09, 2005 at 09:48:18PM +0100, Andre Oppermann wrote:
> A> The problem is with locally generated packets which go the wrong way.
> A> This gets nasty when the box has to generate some path MTU discovery
> A> ICMP message and such.  What I implemented is the correct thing to do
> A> and prevents foot-shooting.  On the other hand it prevents people from
> A> forwarding local ports and such.  Both sides of the coin have merit
> A> and there is no easy deciding between them or obvious right or wrong
> A> choice.
> 
> If it will fix said PR but break forwarding of local ports, then this is
> not acceptable. In this case we will have another PRs in short period.

I didn't say that, did I?

> All functionality in ipfw fwd must remain present.

Yes, we get back there.

-- 
Andre


More information about the freebsd-net mailing list