[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: stack compliance pf_send_reset()
- To: tech_(_at_)_openbsd_(_dot_)_org
- Subject: Re: stack compliance pf_send_reset()
- From: Philipp Buehler <lists_(_at_)_fips_(_dot_)_de>
- Date: Fri, 7 Jun 2002 16:24:01 +0200
- Mail-followup-to: tech_(_at_)_openbsd_(_dot_)_org
- Reply-to: Philipp Buehler <lists_(_at_)_fips_(_dot_)_de>
On 06/06/2002, Philipp Buehler <philipp_(_at_)_buehler_(_dot_)_de> wrote To tech_(_at_)_openbsd_(_dot_)_org:
> ip_output.c will keep the DF bit, it was set by the caller.
and the caller is something different in this case, thx for
clarification from itojun.
way easier and correct patch would be:
--- sys/net/pf.c.orig Thu Jun 6 23:26:24 2002
+++ sys/net/pf.c Fri Jun 7 16:55:06 2002
@@ -2841,7 +2841,7 @@
h2->ip_ttl = ip_defttl;
h2->ip_sum = 0;
h2->ip_len = len;
- h2->ip_off = 0;
+ h2->ip_off = ip_mtudisc ? IP_DF : 0;
ip_output(m, NULL, NULL, 0, NULL, NULL);
break;
#endif /* INET */
ciao
--
Philipp Buehler, aka fips | sysfive.com GmbH | BOfH | NUCH | <double-p>
#1: Break the clue barrier!
#2: Already had buzzword confuseritis ?
Visit your host, monkey.org