Re: NetBSD 3.x, IPv6 and IPF

[mlelstv%serpens.de@localhost (Michael van Elst)]

dmb%yenn.underlegend.net@localhost (Dominik =?iso-8859-1?Q?Bia=B3y?=) writes:

>>>fr_checkicmp6matchingstate(c0911980,0,28,c0911980,8) at 
>>>netbsd:fr_checkicmp6matchingstate+0x95
>> Sounds like an old bug, which was 'fixed' by an ipf upgrade on the
>> way to netbsd-4. I doubt that this will be backported to netbsd-3.
>>
>I have also hit this bug. Is there any workaround? I see the bug is in
>fragmented ipv6 packets handling (am I right?). Would not using
>``keep frags'' be sufficient?

I don't think so. One step of the fix was sys/dist/ipf/netinet/fil.c 1.38
but since multiple ipf upgrades happened since netbsd-3 I doubt that
this will solve your problem.

-- 
-- 
                                Michael van Elst
Internet: mlelstv%serpens.de@localhost
                                "A potential Snark may lurk in every tree."