Date: Thu, 18 Jun 2009 12:54:02 +0200 From: Ivan Voras <ivoras@freebsd.org> To: freebsd-ipfw@freebsd.org Subject: PR kern/117234 - ipfw + ipv6 tcp acks Message-ID: <h1d6c9$emi$1@ger.gmane.org>
next in thread | raw e-mail | index | archive | help
Hi, Can someone please review and if possible commit this PR: http://www.freebsd.org/cgi/query-pr.cgi?pr=117234 There are multiple versions of the patch in the PR, there is none for -CURRENT. The problem is that, for ipv4, ipfw sends keepalives for TCP connections handled by dynamic rules, while on ipv6 the dynamic rules simply expire after a timeout, causing connections to be broken in a bad way (established TCP packets simply get dropped). I don't know if the patch is the correct way to solve the problem, but it apparently works.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?h1d6c9$emi$1>