Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 18 Feb 2016 04:48:16 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-net@FreeBSD.org
Subject:   [Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality
Message-ID:  <bug-207087-2472-UtDeCOxQdJ@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-207087-2472@https.bugs.freebsd.org/bugzilla/>
References:  <bug-207087-2472@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D207087

--- Comment #47 from Andrey V. Elsukov <ae@FreeBSD.org> ---
(In reply to George V. Neville-Neil from comment #44)
> Created attachment 167113 [details]
> Only use tryfoward() when pfilter hooks are not present
>=20
> This is a patch against HEAD that I'm testing.  It ought to also apply
> against 10-STABLE though with an offset.  It bypasses tryforward() when
> there are pfil hooks present which will prevent issues from rewritten
> packets not having error reports generated.

With this patch we will lost the tryforward's goal (fastforwarding by defau=
lt)
for routers where firewall is present. I guess the most of routers has
firewall.

--=20
You are receiving this mail because:
You are on the CC list for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-207087-2472-UtDeCOxQdJ>