[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: stack compliance pf_send_reset()



On 06/06/2002, Philipp Buehler <philipp_(_at_)_buehler_(_dot_)_de> wrote To tech_(_at_)_openbsd_(_dot_)_org:
> ip_output.c will keep the DF bit, it was set by the caller.

and the caller is something different in this case, thx for
clarification from itojun.

way easier and correct patch would be:

--- sys/net/pf.c.orig   Thu Jun  6 23:26:24 2002
+++ sys/net/pf.c        Fri Jun  7 16:55:06 2002
@@ -2841,7 +2841,7 @@
                h2->ip_ttl = ip_defttl;
                h2->ip_sum = 0;
                h2->ip_len = len;
-               h2->ip_off = 0;
+               h2->ip_off = ip_mtudisc ? IP_DF : 0;
                ip_output(m, NULL, NULL, 0, NULL, NULL);
                break;
 #endif /* INET */

ciao
-- 
Philipp Buehler, aka fips | sysfive.com GmbH | BOfH | NUCH | <double-p> 

#1: Break the clue barrier!
#2: Already had buzzword confuseritis ? 



Visit your host, monkey.org