From owner-freebsd-stable@FreeBSD.ORG Fri Sep 3 11:46:18 2004 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 61CA116A4CE for ; Fri, 3 Sep 2004 11:46:18 +0000 (GMT) Received: from goliath.siemens.de (goliath.siemens.de [192.35.17.28]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9B4DF43D39 for ; Fri, 3 Sep 2004 11:46:17 +0000 (GMT) (envelope-from andre.albsmeier@siemens.com) Received: from mail3.siemens.de (mail3.siemens.de [139.25.208.14]) by goliath.siemens.de (8.12.6/8.12.6) with ESMTP id i83BkGec021964; Fri, 3 Sep 2004 13:46:16 +0200 Received: from mars.cert.siemens.com (mars.cert.siemens.com [139.25.19.9]) by mail3.siemens.de (8.12.6/8.12.6) with ESMTP id i83BjtfU022891; Fri, 3 Sep 2004 13:46:05 +0200 Received: from curry.mchp.siemens.de (curry.mchp.siemens.de [139.25.42.7]) mail/cert.mc.pre,v 1.62 2004/08/23 18:38:16 mailadm Exp $) with ESMTP id i83Bjt7S045081; Fri, 3 Sep 2004 13:45:55 +0200 (CEST) Received: (from localhost) by curry.mchp.siemens.de (8.13.1/8.13.1) id i83BjtDL067688; Date: Fri, 3 Sep 2004 13:45:51 +0200 From: Andre Albsmeier To: Greg White Message-ID: <20040903114551.GA1371@curry.mchp.siemens.de> References: <411D03EC.1020900@gmx.net> <20040818133951.GA12273@curry.mchp.siemens.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Echelon: enigma, Underground, SDI, anarchy, BND X-Advice: Drop that crappy M$-Outlook, I'm tired of your viruses! User-Agent: Mutt/1.5.4i cc: freebsd-stable@freebsd.org Subject: Re: problem with ipfilter and todays -stable X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Sep 2004 11:46:18 -0000 On Thu, 02-Sep-2004 at 09:48:09 -0700, Greg White wrote: > On Wed, 18 Aug 2004 15:39:51 +0200, Andre Albsmeier > wrote: > [elided] > > Same here (before replacing src/contrib/ipfilter as described > > above) due to the missing MFC of ipl.h. > > I'm somewhat concerned by this - I've never seen ipfilter broken in > -STABLE for this long, and I've been using it since 4.0. :( > > Darren, I'm sure you're busy with ipfilter-4.0 and such, but is > ipfilter unmaintained in -STABLE now? I've currently avoided upgrading > any of the -STABLE boxes I have in production solely for this problem > ( ping stopped working, then I noticed the version mismatch issue as > well ). The version mismatch is easy to fix, just pull ipl.h into 4-STABLE. This is just cosmetic, for the "real" problem, I assume someone has to fix the checksum correction in nat_icmp(). For testing one can use a fairly simple setup as described in http://www.mail-archive.com/ipfilter@coombs.anu.edu.au/msg04558.html -Andre