The following reply was made to PR kern/122109; it has been noted by GNATS.
From: "Alexander V. Chernikov" <melif...@ipfw.ru>
To: bug-follo...@freebsd.org, m.dyadche...@211.ru
Cc:
Subject: Re: kern/122109: [ipfw] ipfw nat traceroute problem
Date: Wed, 22 Sep 2010 01:24:40 +0400
Problem can be fixed with a small patch:
--- /usr/src/sys/netinet/libalias/alias.c.orig 2010-09-22
01:07:19.000000000 +0400
+++ /usr/src/sys/netinet/libalias/alias.c 2010-09-22
01:11:11.000000000 +0400
@@ -432,7 +432,7 @@
}
return (PKT_ALIAS_OK);
}
- return (PKT_ALIAS_IGNORED);
+ return (PKT_ALIAS_OK);
}
IcmpAliasIn2() doesn't create state for incoming packets (like
IcmpAliasIn1() does)
IcmpAliasIn2() is called only in case of
ICMP_UNREACH|ICMP_SOURCEQUENCH|ICMP_TIMXCEED|ICMP_PARAMPROB
If incoming icmp packet of given type is not found in internal state
table we can just pass it to the host system (back to ipfw or netgraph
hook, really) without even creating state
_______________________________________________
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"
