Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 11 Jun 2015 18:08:03 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-pf@FreeBSD.org
Subject:   [Bug 200330] panic: pf_addr_cmp: unknown address family 0 when scrub fragment drop-ovl is used
Message-ID:  <bug-200330-17777-nWARmBuBaX@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-200330-17777@https.bugs.freebsd.org/bugzilla/>
References:  <bug-200330-17777@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200330

--- Comment #17 from Kristof Provost <kristof@freebsd.org> ---
'reassemble' does the right thing, in that it will fully reassemble the packet.
It handles overlaps, by discarding the (parts of) packets it's already seen.

Processing continues with the full packet, not on a fragment-per-fragment
basis.

When filtering input packets that's where it ends, because the host would have
to reassemble anyway.

When forwarding we also just continue with the full packet, and fragment again
when transmitting. This implies that it's possible that we'll receive 5 packets
of 80 bytes, but we transmit one packet of 400 bytes. 

(Note that this is slightly different for IPv6. There we'll always refragment
to the size of the largest fragment we received so we don't break path MTU.)

-- 
You are receiving this mail because:
You are on the CC list for the bug.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-200330-17777-nWARmBuBaX>