Mike Silbersack wrote: > (I'm redirecting this back to freebsd-net, as it doesn't seem appropriate > for bugtraq.) > > I did some quick investigation last night, and agree with Phil that this > is a bug. When the syncache was implemented, only a subset of the normal > tcp output code was copied over for the purpose of sending syn-acks. One > part of the code that was not moved over was the part that determines when > the DF and tos bits are set.
Ahhh. Sounds like many of the bugs I've found in my own software. > I also agree with Mikael that this isn't an important issue, given that > syn-ack packets are quite tiny. Nonetheless, I will commit a fix in the > next few days. However, it's too late to MFC it in time for 4.6-release. It's certainly not a security-threatening issue... but, as you said, it is a bug. > Phil: In the future, please try a bit harder to notify someone if you > believe that a bug is serious enough for posting to bugtraq. freebsd-net > is a relatively busy list, and things do get missed. Certainly. I appologize if I caused the FreeBSD developers any grief over my post. I'm not a FreeBSD user myself and wasn't aware of the http://www.freebsd.org/send-pr.html page until yesterday. I did submit a bug report there yesterday, which got assigned an ID of kern/39141, so when you commit the fix, you can update/close that case as well. Thanks again for your quick response. Phil Dibowitz (on Behalf of myself and Richard van den Berg) -- Insanity Palace of Metallica http://www.ipom.com [EMAIL PROTECTED] -- To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message