Date: Wed, 24 Jan 2001 14:45:30 -0800 (PST) From: Luigi Rizzo <rizzo@aciri.org> To: agoodloe@gradient.cis.upenn.edu (Alwyn Goodloe) Cc: hackers@FreeBSD.ORG Subject: Re: Divert Sockets & Fragmentation Message-ID: <200101242245.f0OMjUX20166@iguana.aciri.org> In-Reply-To: <Pine.SOL.4.21.0101241726530.29134-100000@gradient.cis.upenn.edu> from Alwyn Goodloe at "Jan 24, 2001 5:41:46 pm"
next in thread | previous in thread | raw e-mail | index | archive | help
it depends on what template do you use for matching. the firewall acts before reassembly, so for the fragments you will not be able to see the port numbers. cheers luigi > I have been using divert sockets for a while sending small (< MTU) UDP > packets and everything worked fine. Now that the UDP packets are larger > (>MTU = 1500) and hence fragmentation is taking place there seems to be a > problem. tcpdump tells me that the fragmented packets arrive but it seems > that they are never diverted. I say this because after they are received > recvfrom () never gets the packet. I've done things like play with the > nbytes field of the recvfrom() fn. without any success. Any > suggestions, I'm sure its something stupid. > > > Alwyn > agoodloe@gradient.cis.upenn.edu > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-hackers" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200101242245.f0OMjUX20166>