From owner-cvs-all@FreeBSD.ORG  Tue Jan 24 17:57:19 2006
Return-Path: <owner-cvs-all@FreeBSD.ORG>
X-Original-To: cvs-all@FreeBSD.org
Delivered-To: cvs-all@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D028716A41F;
	Tue, 24 Jan 2006 17:57:19 +0000 (GMT)
	(envelope-from andre@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A36BD43D4C;
	Tue, 24 Jan 2006 17:57:19 +0000 (GMT)
	(envelope-from andre@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id k0OHvJAb042550;
	Tue, 24 Jan 2006 17:57:19 GMT
	(envelope-from andre@repoman.freebsd.org)
Received: (from andre@localhost)
	by repoman.freebsd.org (8.13.1/8.13.1/Submit) id k0OHvJ8r042549;
	Tue, 24 Jan 2006 17:57:19 GMT (envelope-from andre)
Message-Id: <200601241757.k0OHvJ8r042549@repoman.freebsd.org>
From: Andre Oppermann <andre@FreeBSD.org>
Date: Tue, 24 Jan 2006 17:57:19 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Cc: 
Subject: cvs commit: src/sys/netinet ip_input.c
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Jan 2006 17:57:20 -0000

andre       2006-01-24 17:57:19 UTC

  FreeBSD src repository

  Modified files:
    sys/netinet          ip_input.c 
  Log:
  When doing IP forwarding with [FAST_]IPSEC compiled into the kernel
  ip_forward() would report back a zero MTU in ICMP needfrag messages
  because on a IPSEC SP lookup failure no MTU got computed.
  
  Fix this by changing the logic to compute a new MTU in any case if
  IPSEC didn't do it.
  
  Change MTU computation logic to use egress interface MTU if available
  or the next smaller MTU compared to the current packet size instead
  of falling back to a very small fixed MTU.
  
  Fix associated comment.
  
  PR:             kern/91412
  MFC after:      3 days
  
  Revision  Changes    Path
  1.312     +10 -8     src/sys/netinet/ip_input.c