Subject: Re: kern/36309
To: None <ipf-bug-people@NetBSD.org, gnats-admin@netbsd.org,>
From: Darren Reed <darrenr@reed.wattle.id.au>
List: netbsd-bugs
Date: 05/20/2007 19:55:02
The following reply was made to PR kern/36309; it has been noted by GNATS.

From: Darren Reed <darrenr@reed.wattle.id.au>
To: Michael van Elst <mlelstv@serpens.de>
Cc: gnats-bugs@NetBSD.org
Subject: Re: kern/36309
Date: Sun, 20 May 2007 12:52:51 -0700

 So you went from 4.1.19 to 4.1.20 and PMTU detection stopped working.
 
 The relevant bug fixes are:
 + 4.1.20 - Released 30 April 2007
 +
 + adjust TCP state numbers, making 11 closed (was 0) to better facilitate
 + detecting closing connections that we can wipe out when a SYN arrives
 + that matches the old
 +
 + make it compile on Solaris10 Update3
 +
 + structures used for ipf command ioctls weren't being freed in timeout
 + fashion on solairs
 +
 + use NL_EXPIRE, not ISL_EXPIRE, for expiring NAT sessions
 +
 + adjust TCP timeout values and introduce a time-wait specifc timeout
 + to get a better TCP FSM emulation and one that can hopefully do a better
 + job of cleaning up in a speedy fashion than previous
 +
 + refactor the automatic flushing of TCP state entries when we fill up,
 + but use the same algorithm as before but now it hopefully works
 +
 + only 2 out of 4 interface names were being changed by ipfs when
 + interface renaming was being used for state entries
 +
 + add ipf_proxy_debug to ipf-T
 +
 + matching of last fragments that had a number of bytes that wasn't a
 + multiple of 8 failed
 +
 + some combinations of TCP flags are considered bad aren't picked up as
 such,
 + but these may be possible with T/TCP
 +
   4.1.19 - Released 22 February 2007
 
 
 The only changes to NAT were with respect to flushing the NAT table.
 
 http://coombs.anu.edu.au/~avalon/patch-4.1.20.gz
 
 Did nothing else change?
 
 Darren