Date: Sun, 14 May 2006 06:34:24 +0200 (CEST) From: "Max Laier" <max@love2party.net> To: freebsd-ipfw@freebsd.org Subject: Re: kern/88664: [ipfw] ipfw stateful firewalling broken with IPv6 Message-ID: <62901.192.168.4.1.1147581264.squirrel@mail.abi01.homeunix.org> In-Reply-To: <200605131548.k4DFmpAB092625@freefall.freebsd.org> References: <200605131548.k4DFmpAB092625@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
------=_20060514063424_91069 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit Everybody with IPv6 please take a look at the patches in the PR and report back whether or not they fix things. > http://www.freebsd.org/cgi/query-pr.cgi?pr=88664 -- /"\ Best regards, | mlaier@freebsd.org \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | mlaier@EFnet / \ ASCII Ribbon Campaign | Against HTML Mail and News ------=_20060514063424_91069 Content-Type: text/x-diff; name="ipfw_hash.diff" Content-Transfer-Encoding: 8bit Content-Disposition: attachment; filename="ipfw_hash.diff" Index: ip_fw2.c =================================================================== RCS file: /home/ncvs/src/sys/netinet/ip_fw2.c,v retrieving revision 1.130 diff -u -r1.130 ip_fw2.c --- ip_fw2.c 12 May 2006 20:39:23 -0000 1.130 +++ ip_fw2.c 14 May 2006 04:21:01 -0000 @@ -641,11 +641,11 @@ hash_packet6(struct ipfw_flow_id *id) { u_int32_t i; - i = (id->dst_ip6.__u6_addr.__u6_addr32[0]) ^ - (id->dst_ip6.__u6_addr.__u6_addr32[1]) ^ - (id->dst_ip6.__u6_addr.__u6_addr32[2]) ^ + i = (id->dst_ip6.__u6_addr.__u6_addr32[2]) ^ (id->dst_ip6.__u6_addr.__u6_addr32[3]) ^ - (id->dst_port) ^ (id->src_port) ^ (id->flow_id6); + (id->src_ip6.__u6_addr.__u6_addr32[2]) ^ + (id->src_ip6.__u6_addr.__u6_addr32[3]) ^ + (id->dst_port) ^ (id->src_port); return i; } ------=_20060514063424_91069--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?62901.192.168.4.1.1147581264.squirrel>