Hello Darren, Thanks for the answer. I tested same scenario vs FreeBSD - problem persists, so it is not only Linux behaviour. Generally speaking, frags are not required to come in order to destination box, and as such wrong order of arrival can not be an "excuse" to not process them properly. Normal IP stack reassembles them just fine. Is there any special reasoning why IPF must not do so as well?
-Alex Zhilyakov Network Manager, Accatel Inc. +1-212-3794000 On Fri, 12 Nov 2004, Darren Reed wrote: > In some email I received from Alex Zhilyakov, sie wrote: > > Hello, > > > > Following up with this issue, I found out that if frags arrive in > > straight (not reverse) order to ipf, they get through just fine. > > As second experiment I used another Solaris (not Linux now) box to > > originate fragmented UDP: > ... > > Right. The problem here is that Linux, by sending the "offset 0" fragment > last makes it impossible for "keep frags" to work. > > Darren >
