Date: Fri, 27 Oct 2000 00:19:20 -0700 (PDT) From: Ruslan Ermilov <ru@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/netinet ip_fw.c Message-ID: <200010270719.AAA80698@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
ru 2000/10/27 00:19:20 PDT
Modified files:
sys/netinet ip_fw.c
Log:
Fetch the protocol header (TCP, UDP, ICMP) only from the first fragment
of IP datagram. This fixes the problem when firewall denied fragmented
packets whose last fragment was less than minimum protocol header size.
Found by: Harti Brandt <brandt@fokus.gmd.de>
PR: kern/22309
Revision Changes Path
1.147 +12 -17 src/sys/netinet/ip_fw.c
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200010270719.AAA80698>