Date: Sun, 5 Dec 2004 02:29:11 +0100 From: Daniel Hartmeier <daniel@benzedrine.cx> To: Bernhard Schmidt <berni@birkenwald.de> Cc: freebsd-pf@freebsd.org Subject: Re: IPv6 MLD packets blocked Message-ID: <20041205012911.GC32476@insomnia.benzedrine.cx> In-Reply-To: <1102191882.12613.39.camel@cholera> References: <slrncr28gr.ig8.berni@bschmidt.msgid.cybernet-ag.net> <20041204200312.GE32076@insomnia.benzedrine.cx> <1102191882.12613.39.camel@cholera>
next in thread | previous in thread | raw e-mail | index | archive | help
Can you try the patch below? I was able to reproduce the problem and this solves it for me. Daniel Index: pf.c =================================================================== RCS file: /cvs/freebsd/src/sys/contrib/pf/net/pf.c,v retrieving revision 1.23 diff -u -r1.23 pf.c --- pf.c 24 Nov 2004 00:43:34 -0000 1.23 +++ pf.c 5 Dec 2004 01:29:17 -0000 @@ -6334,7 +6334,8 @@ goto done; } if (dir == PF_IN && pf_check_proto_cksum(m, off, - ntohs(h->ip6_plen), IPPROTO_TCP, AF_INET6)) { + ntohs(h->ip6_plen) - (off - sizeof(struct ip6_hdr)), + IPPROTO_TCP, AF_INET6)) { action = PF_DROP; goto done; } @@ -6372,7 +6373,8 @@ goto done; } if (dir == PF_IN && uh.uh_sum && pf_check_proto_cksum(m, - off, ntohs(h->ip6_plen), IPPROTO_UDP, AF_INET6)) { + off, ntohs(h->ip6_plen) - (off - sizeof(struct ip6_hdr)), + IPPROTO_UDP, AF_INET6)) { action = PF_DROP; goto done; } @@ -6411,7 +6413,8 @@ goto done; } if (dir == PF_IN && pf_check_proto_cksum(m, off, - ntohs(h->ip6_plen), IPPROTO_ICMPV6, AF_INET6)) { + ntohs(h->ip6_plen) - (off - sizeof(struct ip6_hdr)), + IPPROTO_ICMPV6, AF_INET6)) { action = PF_DROP; goto done; }
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041205012911.GC32476>