Kern/73129 and 5.3-STABLE

Andre Oppermann oppermann at networx.ch
Thu Feb 10 02:53:21 PST 2005


Gleb Smirnoff wrote:
> 
> On Thu, Feb 10, 2005 at 11:27:35AM +0100, Andre Oppermann wrote:
> A> > On Wed, Feb 09, 2005 at 09:48:18PM +0100, Andre Oppermann wrote:
> A> > A> The problem is with locally generated packets which go the wrong way.
> A> > A> This gets nasty when the box has to generate some path MTU discovery
> A> > A> ICMP message and such.  What I implemented is the correct thing to do
> A> > A> and prevents foot-shooting.  On the other hand it prevents people from
> A> > A> forwarding local ports and such.  Both sides of the coin have merit
> A> > A> and there is no easy deciding between them or obvious right or wrong
> A> > A> choice.
> A> >
> A> > If it will fix said PR but break forwarding of local ports, then this is
> A> > not acceptable. In this case we will have another PRs in short period.
> A>
> A> I didn't say that, did I?
> 
> Pardon, I probably misunderstood "On the other hand it prevents people from
> forwarding local ports and such".
> What did you mean here?

The code that is currently in the tree.

-- 
Andre


More information about the freebsd-net mailing list