From owner-svn-src-head@FreeBSD.ORG Tue Apr 7 08:12:11 2015 Return-Path: Delivered-To: svn-src-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 73CAD176; Tue, 7 Apr 2015 08:12:11 +0000 (UTC) Received: from venus.codepro.be (venus.codepro.be [IPv6:2a01:4f8:162:1127::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.codepro.be", Issuer "Gandi Standard SSL CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3166C672; Tue, 7 Apr 2015 08:12:10 +0000 (UTC) Received: from vega.codepro.be (unknown [172.16.1.3]) by venus.codepro.be (Postfix) with ESMTP id D2CEB1649A; Tue, 7 Apr 2015 10:12:07 +0200 (CEST) Received: by vega.codepro.be (Postfix, from userid 1001) id CD25ABD9E; Tue, 7 Apr 2015 10:12:07 +0200 (CEST) Date: Tue, 7 Apr 2015 10:12:07 +0200 From: Kristof Provost To: Hans Ottevanger Subject: Re: svn commit: r281164 - head/sys/netpfil/pf Message-ID: <20150407081207.GP73237@vega.codepro.be> References: <201504061905.t36J51EX005483@svn.freebsd.org> <55237A2D.2000602@beastielabs.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <55237A2D.2000602@beastielabs.net> X-Checked-By-NSA: Probably User-Agent: Mutt/1.5.23 (2014-03-12) Cc: svn-src-head@freebsd.org, svn-src-all@freebsd.org, src-committers@freebsd.org X-BeenThere: svn-src-head@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for the src tree for head/-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Apr 2015 08:12:11 -0000 On 2015-04-07 08:33:17 (+0200), Hans Ottevanger wrote: > On 04/06/15 21:05, Kristof Provost wrote: > > Author: kp > > Date: Mon Apr 6 19:05:00 2015 > > New Revision: 281164 > > URL: https://svnweb.freebsd.org/changeset/base/281164 > > > > Log: > > pf: Skip firewall for refragmented ip6 packets > > Is there any chance that this commit and your previous pf and inet6 > related changes will get MFC'd to 10.1-STABLE. Is it safe or even > possible to incorporate these changes myself? > I have no immediate plans to MFC this. There's still a bit of work to be done and a little more testing as well before I'd be comfortable merging this back. For example, I still need to commit https://reviews.freebsd.org/D1815 (although that'll happen soon). I also think there's at least one other bug, but I'll need some more time to investigate that. That said, it is fairly straightforwards to merge these patches back to 10.1. I'm running two stable/10 systems with these patches and I've not seen any issues yet. Regards, Kristof