Hi,

I just committed few IPF fixes and I'd like to hear your feedback (good or bad). 
I'm running these without any problems in all our NetBSD/amd64 4.0_RC1 servers 
and also on my laptop running NetBSD/i386 4.99.x. I have already requested a 
pullup to the netbsd-4 brach (see ticket #876).

* Fixed IPF bug #1791241 ("keep frag does not work with keep state for fragments")
* Fixed IPF bug #1785199 ("fr_natderef causes lock contention and performance 
slowdown")

Here's the test procedure on NetBSD 4.0_RC1:

cd /usr/src
cvs update -kk -j1.39 -j1.40 sys/dist/ipf/netinet/fil.c
cvs update -kk -j1.30 -j1.31 sys/dist/ipf/netinet/ip_nat.c
cvs update -kk -j1.26 -j1.27 sys/dist/ipf/netinet/ip_state.c

Now build your kernel and reboot.

Martti