From owner-freebsd-pf@FreeBSD.ORG  Tue Feb  3 20:43:02 2015
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 8FA79B80
 for <freebsd-pf@freebsd.org>; Tue,  3 Feb 2015 20:43:02 +0000 (UTC)
Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com
 [66.111.4.25])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 5F77EB95
 for <freebsd-pf@freebsd.org>; Tue,  3 Feb 2015 20:43:02 +0000 (UTC)
Received: from compute2.internal (compute2.nyi.internal [10.202.2.42])
 by mailout.nyi.internal (Postfix) with ESMTP id 98F6E20CC2
 for <freebsd-pf@freebsd.org>; Tue,  3 Feb 2015 15:34:27 -0500 (EST)
Received: from web3 ([10.202.2.213])
 by compute2.internal (MEProxy); Tue, 03 Feb 2015 15:34:27 -0500
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=
 messagingengine.com; h=message-id:x-sasl-enc:from:to:cc
 :mime-version:content-transfer-encoding:content-type:subject
 :date:in-reply-to:references; s=smtpout; bh=kpmNOGII4pUvQWvB49hf
 tFoDUg0=; b=BwfmVNrtT6Zdg/Q3cIqvXE8qYBB7z62dsgRnn0bghgWvWbEg85wh
 euQkK0GWkm8PI5AWDNK3Y5scacNGuX1eO3M2rZhLdBsXR1ywYgxme6C7H2KVln8o
 dxOzil6BpfjPHKenxLTwoBuXatHQwmzJ1moY9HcVO8oB5o3F9yecZj0=
Received: by web3.nyi.internal (Postfix, from userid 99)
 id 63911101DED; Tue,  3 Feb 2015 15:34:27 -0500 (EST)
Message-Id: <1422995667.3937612.222676285.30AA6118@webmail.messagingengine.com>
X-Sasl-Enc: bzGx99hcGXRinphP0HRTyaMO85MNAFNKsKwaWZ5PqU1t 1422995667
From: Mark Felder <feld@FreeBSD.org>
To: Kristof Provost <kristof@sigsegv.be>, freebsd-pf@freebsd.org
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain
X-Mailer: MessagingEngine.com Webmail Interface - ajax-b6284d51
Subject: Re: PF IPv6 fragments handling
Date: Tue, 03 Feb 2015 14:34:27 -0600
In-Reply-To: <20150203202519.GD2167@vega.codepro.be>
References: <20150203202519.GD2167@vega.codepro.be>
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
 \(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf/>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Feb 2015 20:43:02 -0000



On Tue, Feb 3, 2015, at 14:25, Kristof Provost wrote:
> Hi,
> 
> I have a couple of patches to let PF handle fragmented IPv6 packets.
> They've been uploaded to phabricator:
> 
> https://reviews.freebsd.org/D1764
> https://reviews.freebsd.org/D1765
> https://reviews.freebsd.org/D1766
> https://reviews.freebsd.org/D1767
> 
> Two of my systems are currently running them, seemingly without
> problems.
> 

I'm building a 10.1 kernel with these patches applied to test as well.

Thanks so much for looking into this!