Problems with IP fragments

Lev Serebryakov lev at FreeBSD.org
Tue Feb 10 13:48:04 UTC 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 10.02.2015 16:26, Andre Albsmeier wrote:

>> reass works for me, but kills all IPv6 packets, so it should be
>> "reass ip4 from any to any in [recv $iface]"
> 
> Hmm, I tried again with ipv4 but this doesn't help (I don't use v6 
> anyway here). But it seems to work as soon as I switch off layer2 
> filtering. Normally I use net.link.ether.ipfw=1 (and, yes, I have 
> the appropriate arp rules installed). As soon as I switch this to 
> off, reassembly works. However, I have no idea why the reass code 
> messes around with layer2...
 Looks like, reass messes around with anything but ip4 in one way or
other.

- -- 
// Lev Serebryakov
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)
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=ht4X
-----END PGP SIGNATURE-----


More information about the freebsd-net mailing list