Subject: Re: kern/36309
To: None <ipf-bug-people@NetBSD.org, gnats-admin@netbsd.org,>
From: Darren Reed <darrenr@reed.wattle.id.au>
List: netbsd-bugs
Date: 05/20/2007 19:55:02
The following reply was made to PR kern/36309; it has been noted by GNATS.
From: Darren Reed <darrenr@reed.wattle.id.au>
To: Michael van Elst <mlelstv@serpens.de>
Cc: gnats-bugs@NetBSD.org
Subject: Re: kern/36309
Date: Sun, 20 May 2007 12:52:51 -0700
So you went from 4.1.19 to 4.1.20 and PMTU detection stopped working.
The relevant bug fixes are:
+ 4.1.20 - Released 30 April 2007
+
+ adjust TCP state numbers, making 11 closed (was 0) to better facilitate
+ detecting closing connections that we can wipe out when a SYN arrives
+ that matches the old
+
+ make it compile on Solaris10 Update3
+
+ structures used for ipf command ioctls weren't being freed in timeout
+ fashion on solairs
+
+ use NL_EXPIRE, not ISL_EXPIRE, for expiring NAT sessions
+
+ adjust TCP timeout values and introduce a time-wait specifc timeout
+ to get a better TCP FSM emulation and one that can hopefully do a better
+ job of cleaning up in a speedy fashion than previous
+
+ refactor the automatic flushing of TCP state entries when we fill up,
+ but use the same algorithm as before but now it hopefully works
+
+ only 2 out of 4 interface names were being changed by ipfs when
+ interface renaming was being used for state entries
+
+ add ipf_proxy_debug to ipf-T
+
+ matching of last fragments that had a number of bytes that wasn't a
+ multiple of 8 failed
+
+ some combinations of TCP flags are considered bad aren't picked up as
such,
+ but these may be possible with T/TCP
+
4.1.19 - Released 22 February 2007
The only changes to NAT were with respect to flushing the NAT table.
http://coombs.anu.edu.au/~avalon/patch-4.1.20.gz
Did nothing else change?
Darren