Subject: Re: kern/26839
To: None <darrenr@netbsd.org, gnats-admin@netbsd.org,>
From: Pavel Cahyna <pcah8322@artax.karlin.mff.cuni.cz>
List: netbsd-bugs
Date: 02/27/2005 18:05:02
The following reply was made to PR kern/26839; it has been noted by GNATS.
From: Pavel Cahyna <pcah8322@artax.karlin.mff.cuni.cz>
To: Darren Reed <darrenr@netbsd.org>
Cc: gnats-bugs@netbsd.org
Subject: Re: kern/26839
Date: Sun, 27 Feb 2005 19:03:56 +0100
Hello,
> Can you please confirm if this bug is now fixed in -current and/or on
> the 2.0 branch ?
Sorry, i can't compile anything right now, so I can only deduce. 2 and 2-0
branches have the same fix that I applied locally, so I can considered it
fixed for me.
For -current, you chose another fix in IPFilter 4.1.5 . Could you please
look at my email:
http://mail-index.netbsd.org/current-users/2005/02/20/0013.html ? I
suspect that your fix might break stateful filtering of ICMP error
packets, which would manifest as traceroute not working through a gateway
with "keep state" rules.
I suspect it because your current fix is the same as the one you suggested
several months ago and that had exactly ths problem. (Look at the log for
this PR.)
Bye Pavel