Checksumming outgoing packets in PF vs in ip[6]_output

[Ermal Luçi]

Hello Ilya,

just approval from some people.
I will follow-up.

On Fri, Nov 14, 2014 at 1:34 PM, Ilya Bakulin <ilya at bakulin.de> wrote:

> Hi Ermal,
> yes, this patch works for both #179392 and #172648.
>
> What do you need to merge this into -CURRENT and MFC to stable/9?
>
>
> On 2014-11-14 12:57, Ermal Luçi wrote:
> > Here is a direct patch.
> > Give it a try.
> >
> > For the reply-to issues there is another patch complementary to this i
> > will send.
> >
> > On Fri, Nov 14, 2014 at 11:34 AM, Ilya Bakulin <ilya at bakulin.de>
> > wrote:
> >
> >> Hi all,
> >>
> >> actually with _my_ checksumming patch the rdr-to is broken
> >> completely :-(
> >> So I'm waiting for Ermal to send an updated version of his patch
> >> that may really solve the problem!
> >>
> >> On 2014-11-14 09:17, Ermal Luçi wrote:
> >> Yes confirmed it will solve that issue as well.
> >>
> >> On Thu, Nov 13, 2014 at 9:30 PM, J David <j.david.lists at gmail.com>
> >> wrote:
> >>
> >> On Wed, Nov 5, 2014 at 9:28 AM, Ilya Bakulin <ilya at bakulin.de>
> >> wrote:
> >>> Of course it was interesting what does the upstream PF do (@
> >> OpenBSD).
> >> Seems
> >>> they have made the decision to
> >>> leave the task of recalculating the checksums for outgoing
> >> packets to
> >>> ip[6]_output, because currently
> >>> the code there overwrites the checksum anyway.
> >>> This seems a correct way to me. pf should not longer do any
> >> checksum
> >> updates
> >>> in inbound and outbound path.
> >>
> >> Is there any chance this change would help with bug 179392 as well?
> >>
> >> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=179392 [1]
> >>
> >> Or is that a separate issue?
> >>
> >> Thanks!
> >> _______________________________________________
> >> freebsd-net at freebsd.org mailing list
> >> http://lists.freebsd.org/mailman/listinfo/freebsd-net [2]
> >> To unsubscribe, send any mail to
> >> "freebsd-net-unsubscribe at freebsd.org"
> >
> > --
> >
> > Ermal
> >
> > Links:
> > ------
> > [1] https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=179392
> > [2] http://lists.freebsd.org/mailman/listinfo/freebsd-net
> --
> Sent from my Android device with K-9 Mail. Please excuse my brevity.




-- 
Ermal