From owner-freebsd-pf@FreeBSD.ORG  Sun Dec  5 01:29:24 2004
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E8EBD16A4D2
	for <freebsd-pf@freebsd.org>; Sun,  5 Dec 2004 01:29:23 +0000 (GMT)
Received: from insomnia.benzedrine.cx (insomnia.benzedrine.cx [62.65.145.30])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 0E7D643D62
	for <freebsd-pf@freebsd.org>; Sun,  5 Dec 2004 01:29:23 +0000 (GMT)
	(envelope-from dhartmei@insomnia.benzedrine.cx)
Received: from insomnia.benzedrine.cx (dhartmei@localhost [127.0.0.1])
	iB51TDq7025101
	(version=TLSv1/SSLv3 cipher=DHE-DSS-AES256-SHA bits=256 verify=NO);
	Sun, 5 Dec 2004 02:29:13 +0100 (MET)
Received: (from dhartmei@localhost)
	by insomnia.benzedrine.cx (8.13.1/8.12.10/Submit) id iB51TCqv025104;
	Sun, 5 Dec 2004 02:29:12 +0100 (MET)
Date: Sun, 5 Dec 2004 02:29:11 +0100
From: Daniel Hartmeier <daniel@benzedrine.cx>
To: Bernhard Schmidt <berni@birkenwald.de>
Message-ID: <20041205012911.GC32476@insomnia.benzedrine.cx>
References: <slrncr28gr.ig8.berni@bschmidt.msgid.cybernet-ag.net>
	<20041204200312.GE32076@insomnia.benzedrine.cx>
	<1102191882.12613.39.camel@cholera>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <1102191882.12613.39.camel@cholera>
User-Agent: Mutt/1.4.1i
cc: freebsd-pf@freebsd.org
Subject: Re: IPv6 MLD packets blocked
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical discussion and general questions about packet filter (pf)
	<freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 05 Dec 2004 01:29:24 -0000

Can you try the patch below? I was able to reproduce the problem and
this solves it for me.

Daniel


Index: pf.c
===================================================================
RCS file: /cvs/freebsd/src/sys/contrib/pf/net/pf.c,v
retrieving revision 1.23
diff -u -r1.23 pf.c
--- pf.c	24 Nov 2004 00:43:34 -0000	1.23
+++ pf.c	5 Dec 2004 01:29:17 -0000
@@ -6334,7 +6334,8 @@
 			goto done;
 		}
 		if (dir == PF_IN && pf_check_proto_cksum(m, off,
-		    ntohs(h->ip6_plen), IPPROTO_TCP, AF_INET6)) {
+		    ntohs(h->ip6_plen) - (off - sizeof(struct ip6_hdr)),
+		    IPPROTO_TCP, AF_INET6)) {
 			action = PF_DROP;
 			goto done;
 		}
@@ -6372,7 +6373,8 @@
 			goto done;
 		}
 		if (dir == PF_IN && uh.uh_sum && pf_check_proto_cksum(m,
-		    off, ntohs(h->ip6_plen), IPPROTO_UDP, AF_INET6)) {
+		    off, ntohs(h->ip6_plen) - (off - sizeof(struct ip6_hdr)),
+		    IPPROTO_UDP, AF_INET6)) {
 			action = PF_DROP;
 			goto done;
 		}
@@ -6411,7 +6413,8 @@
 			goto done;
 		}
 		if (dir == PF_IN && pf_check_proto_cksum(m, off,
-		    ntohs(h->ip6_plen), IPPROTO_ICMPV6, AF_INET6)) {
+		    ntohs(h->ip6_plen)  - (off - sizeof(struct ip6_hdr)),
+		    IPPROTO_ICMPV6, AF_INET6)) {
 			action = PF_DROP;
 			goto done;
 		}