Date: Mon, 6 Jun 2011 19:30:52 +0200 From: crest <crest@informatik.uni-bremen.de> To: Manuel Kasper <mk@neon1.net> Cc: freebsd-ipfw@freebsd.org Subject: Re: kern/157239: [ipfw] [dummynet] ipfw + dummynet corrupts ipv6 packets Message-ID: <CB5F654C-227D-43C0-8A13-F57C19A1861C@informatik.uni-bremen.de> In-Reply-To: <201106041300.p54D0Oji030792@freefall.freebsd.org> References: <201106041300.p54D0Oji030792@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On 04.06.2011, at 15:00, Manuel Kasper wrote: > The following reply was made to PR kern/157239; it has been noted by = GNATS. >=20 > Also, I believe I've found the cause: ipfw/dummynet code uses =3D > SET_HOST_IPLEN on IPv6 packets in two instances, thus inadvertently =3D > swapping the next header and hop limit fields in the IPv6 header, =3D > causing the "Unknown Extension Header" warnings and dropped packets = (or =3D > bad packets appearing on the wire if =3D > net.inet6.ip6.fw.deny_unknown_exthdrs=3D3D0). >=20 > A patch against 8.2-RELEASE that fixes this issue for me is attached - = =3D > Jan, could you please verify if this fixes the issue for you too? I tested the patch and it solved the problem for a simple test setup. = I'll test it in a more complex setup this evening/ night (TZ=3DCEST).=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CB5F654C-227D-43C0-8A13-F57C19A1861C>