Subject: Re: kern/26839
To: None <darrenr@netbsd.org, gnats-admin@netbsd.org,>
From: Pavel Cahyna <pcah8322@artax.karlin.mff.cuni.cz>
List: netbsd-bugs
Date: 02/27/2005 18:05:02
The following reply was made to PR kern/26839; it has been noted by GNATS.

From: Pavel Cahyna <pcah8322@artax.karlin.mff.cuni.cz>
To: Darren Reed <darrenr@netbsd.org>
Cc: gnats-bugs@netbsd.org
Subject: Re: kern/26839
Date: Sun, 27 Feb 2005 19:03:56 +0100

 Hello,
 
 > Can you please confirm if this bug is now fixed in -current and/or on
 > the 2.0 branch ?
 
 Sorry, i can't compile anything right now, so I can only deduce. 2 and 2-0
 branches have the same fix that I applied locally, so I can considered it
 fixed for me.
 
 For -current, you chose another fix in IPFilter 4.1.5 . Could you please
 look at my email:
 http://mail-index.netbsd.org/current-users/2005/02/20/0013.html ? I
 suspect that your fix might break stateful filtering of ICMP error
 packets, which would manifest as traceroute not working through a gateway
 with "keep state" rules.
 
 I suspect it because your current fix is the same as the one you suggested
 several months ago and that had exactly ths problem. (Look at the log for
 this PR.)
 
 Bye	Pavel