Subject: Re: kern/36309
To: None <ipf-bug-people@netbsd.org, gnats-admin@netbsd.org,>
From: Darren Reed <darrenr@NetBSD.org>
List: netbsd-bugs
Date: 06/23/2007 09:14:39
The following reply was made to PR kern/36309; it has been noted by GNATS.
From: Darren Reed <darrenr@NetBSD.org>
To: Michael van Elst <mlelstv@serpens.de>
Cc: gnats-bugs@NetBSD.org, ipf-bug-people@NetBSD.org,
gnats-admin@NetBSD.org, netbsd-bugs@NetBSD.org
Subject: Re: kern/36309
Date: Thu, 31 May 2007 05:07:35 +0000
In changing the code to be:
- if (nat->nat_dir == NAT_OUTBOUND) {
+ if (oip->ip_dst.s_addr == nat->nat_oip.s_addr) {
a regression is introduced with "ni2". I need to look at this
more closely to determine whether it is the regression test or
the code that is at fault.
"ni2" tests an ICMP NEED FRAG being generated in response to an
incoming packet that we pretend is too large.
Darren