Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 21 Oct 2014 00:50:33 +0400
From:      "Andrey V. Elsukov" <bu7cher@yandex.ru>
To:        Matthew Grooms <mgrooms@shrew.net>, freebsd-net@freebsd.org
Subject:   Re: Broken IPsec + enc +pf/ipfw
Message-ID:  <54457599.4060102@yandex.ru>
In-Reply-To: <544569CF.2060905@shrew.net>
References:  <544535C2.9020301@shrew.net> <544566D2.40303@FreeBSD.org> <544569CF.2060905@shrew.net>

next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--694oOeL46xM7CU5VUMT1pFRaGVQNR1QmV
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

On 21.10.2014 00:00, Matthew Grooms wrote:
> On 10/20/2014 2:47 PM, Andrey V. Elsukov wrote:
>> On 20.10.2014 20:18, Matthew Grooms wrote:
>>> Lastly, I tried to locate a relevant PR but didn't find anything
>>> concrete. Is this related to the issue? And if so, can it be MFCd?
>>>
>>> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D110959
>>
>> Did you try the patch from last PR? It is small and should be applicab=
le
>> to stable/10.
>>
>=20
> As I mentioned, it's not clear to me if the patch was intended to fix
> the issue that I am describing. Is that the case? If so, I would be
> happy to apply it and report back. These are production firewalls, so
> I'd prefer to have some feedback before calculating that risk.

This commit fixes similar problem with ipfw in 11.0-CURRENT. But I think
it won't help you with pf in 10. I guess r266800 is what you need.

--=20
WBR, Andrey V. Elsukov


--694oOeL46xM7CU5VUMT1pFRaGVQNR1QmV
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJURXWeAAoJEAHF6gQQyKF6OvwH/1t3Y2wuJ7n6Mi4v2/xonGih
9ktSG5l3Cqc14x908xOXwMrmoOZllyved6iCFa1DazNa3NbK6VD//I89yi0/kW1O
WEtIv5DGWb2jHn2io38Yj9Yn6I8r8K6qPuvx3j4moc0F9ZZrqGAG69wWvxkECHIL
8mHUzvzs4zw6wFufnjIs0i7p0Sf9Pz0LZdnPXMGZ+GM+7rfHXGkfAULkFqbQC8DR
K6+jYkooZZHYndmf0RsBEaTL28nsaJZzaM6pgtEkz3H27/Z+B6oE1KYn4/ZjF9Xl
EL7a6Q0NI35puPYJ15D5C/taMTHypBNpZ5prJC6k0RvjJw6UD9KUBuAUJPo29Ek=
=40W2
-----END PGP SIGNATURE-----

--694oOeL46xM7CU5VUMT1pFRaGVQNR1QmV--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?54457599.4060102>