[openbsd] Re: Странная фишка с новым pf

[Sergey Prysiazhnyi <apelsin@atmnis.com>]

On Sun, Nov 08, 2009 at 09:44:23PM +0200, Sergey Prysiazhnyi wrote:
> On Sat, Nov 07, 2009 at 03:04:04PM +0200, irix wrote:

> > И как исправить ситуацию.
> 
> 0. Ознакомиться с проблемой: http://marc.info/?l=openbsd-misc&m=125594592125229&w=2
> 
> 1. Применить патч:
> 
> itp[p1]:/usr/src>cvs di -r1.118 -r1.120 sys/net/pf_norm.c
> Index: sys/net/pf_norm.c
> ===================================================================
> RCS file: /cvs/src/sys/net/pf_norm.c,v
> retrieving revision 1.118
> retrieving revision 1.120
> diff -u -p -r1.118 -r1.120
> --- sys/net/pf_norm.c   25 Jun 2009 09:30:28 -0000      1.118
> +++ sys/net/pf_norm.c   1 Sep 2009 15:51:06 -0000       1.120
> @@ -1,4 +1,4 @@
> -/*     $OpenBSD: pf_norm.c,v 1.118 2009/06/25 09:30:28 sthen Exp $ */
> +/*     $OpenBSD: pf_norm.c,v 1.120 2009/09/01 15:51:06 jsing Exp $ */
> 
>  /*
>   * Copyright 2001 Niels Provos <provos@citi.umich.edu>
> @@ -113,11 +113,6 @@ void                        pf_free_fragment(struct pf_fragm
>  struct pf_fragment     *pf_find_fragment(struct ip *, struct pf_frag_tree *);
>  struct mbuf            *pf_reassemble(struct mbuf **, struct pf_fragment **,
> 			    struct pf_frent *, int);
> -void                    pf_scrub_ip(struct mbuf **, u_int16_t, u_int8_t,
> -                           u_int8_t);
> -#ifdef INET6
> -void                    pf_scrub_ip6(struct mbuf **, u_int8_t);
> -#endif
> 
>  #define        DPFPRINTF(x) do {                               \
> 	if (pf_status.debug >= PF_DEBUG_MISC) {         \
> @@ -541,7 +536,7 @@ pf_normalize_ip(struct mbuf **m0, int di
> 		goto drop;
> 
> 	/* Clear IP_DF if we're in no-df mode */
> -       if (!(pf_status.reass & PF_REASS_NODF) && h->ip_off & htons(IP_DF)) {
> +       if (pf_status.reass & PF_REASS_NODF && h->ip_off & htons(IP_DF)) {
> 		u_int16_t ip_off = h->ip_off;
> 
> 		h->ip_off &= htons(~IP_DF);
> 
> 2. Попробовать снова.

Да, если есть возможность, попробуйте _именно_ на 4.6 nor -current!

-- 
To unsubscribe send an e-mail to openbsd+unsubscribe@uaoug.org.ua
For retrieval in messages archive http://www.uaoug.org.ua/archive