From owner-freebsd-ipfw@FreeBSD.ORG Sun May 14 04:34:27 2006 Return-Path: X-Original-To: freebsd-ipfw@freebsd.org Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 849B816A401 for ; Sun, 14 May 2006 04:34:26 +0000 (UTC) (envelope-from max@love2party.net) Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.126.171]) by mx1.FreeBSD.org (Postfix) with ESMTP id D3D9C43D46 for ; Sun, 14 May 2006 04:34:25 +0000 (GMT) (envelope-from max@love2party.net) Received: from [88.64.187.17] (helo=vampire.homelinux.org) by mrelayeu.kundenserver.de (node=mrelayeu1) with ESMTP (Nemesis), id 0MKwpI-1Ff8JE47JY-00072Z; Sun, 14 May 2006 06:34:25 +0200 Received: (qmail 54542 invoked from network); 14 May 2006 04:34:50 -0000 Received: from localhost (HELO mail.abi01.homeunix.org) (192.168.4.64) by localhost with SMTP; 14 May 2006 04:34:50 -0000 Received: from 192.168.4.1 (SquirrelMail authenticated user mlaier) by mail.abi01.homeunix.org with HTTP; Sun, 14 May 2006 06:34:24 +0200 (CEST) Message-ID: <62901.192.168.4.1.1147581264.squirrel@mail.abi01.homeunix.org> In-Reply-To: <200605131548.k4DFmpAB092625@freefall.freebsd.org> References: <200605131548.k4DFmpAB092625@freefall.freebsd.org> Date: Sun, 14 May 2006 06:34:24 +0200 (CEST) From: "Max Laier" To: freebsd-ipfw@freebsd.org User-Agent: SquirrelMail/1.4.6 MIME-Version: 1.0 Content-Type: multipart/mixed;boundary="----=_20060514063424_91069" X-Priority: 3 (Normal) Importance: Normal X-Provags-ID: kundenserver.de abuse@kundenserver.de login:61c499deaeeba3ba5be80f48ecc83056 Subject: Re: kern/88664: [ipfw] ipfw stateful firewalling broken with IPv6 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 May 2006 04:34:27 -0000 ------=_20060514063424_91069 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit Everybody with IPv6 please take a look at the patches in the PR and report back whether or not they fix things. > http://www.freebsd.org/cgi/query-pr.cgi?pr=88664 -- /"\ Best regards, | mlaier@freebsd.org \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | mlaier@EFnet / \ ASCII Ribbon Campaign | Against HTML Mail and News ------=_20060514063424_91069 Content-Type: text/x-diff; name="ipfw_hash.diff" Content-Transfer-Encoding: 8bit Content-Disposition: attachment; filename="ipfw_hash.diff" Index: ip_fw2.c =================================================================== RCS file: /home/ncvs/src/sys/netinet/ip_fw2.c,v retrieving revision 1.130 diff -u -r1.130 ip_fw2.c --- ip_fw2.c 12 May 2006 20:39:23 -0000 1.130 +++ ip_fw2.c 14 May 2006 04:21:01 -0000 @@ -641,11 +641,11 @@ hash_packet6(struct ipfw_flow_id *id) { u_int32_t i; - i = (id->dst_ip6.__u6_addr.__u6_addr32[0]) ^ - (id->dst_ip6.__u6_addr.__u6_addr32[1]) ^ - (id->dst_ip6.__u6_addr.__u6_addr32[2]) ^ + i = (id->dst_ip6.__u6_addr.__u6_addr32[2]) ^ (id->dst_ip6.__u6_addr.__u6_addr32[3]) ^ - (id->dst_port) ^ (id->src_port) ^ (id->flow_id6); + (id->src_ip6.__u6_addr.__u6_addr32[2]) ^ + (id->src_ip6.__u6_addr.__u6_addr32[3]) ^ + (id->dst_port) ^ (id->src_port); return i; } ------=_20060514063424_91069--