Re: tag/untag

2024-01-26 Thread Karim Fodil-Lemelin
Hi Mikhail, This is a very old bug in FreeBSD/ipfw O_PROBE_STATE and the good news is I have a fix for it. The fix is very easy and I will try to explain here what the bug is and what the fix is. The issue is only related to rules that have the F_NOT bit set and that are the beginning of the

ipfw NAT, igb and hardware checksums

2016-01-13 Thread Karim Fodil-Lemelin
Hi, I've hit a very interesting problem with ipfw-nat and local TCP traffic that has enough TCP options to hit a special case in m_megapullup(). Here is the story: I am using the following NIC: igb0@pci0:4:0:0:class=0x02 card=0x8086 chip=0x150e8086 rev=0x01 hdr=0x00 And

Re: layer2 ipfw fwd

2016-01-08 Thread Karim Fodil-Lemelin
On 2015-12-25 12:36 PM, Julian Elischer wrote: On 23/12/2015 11:49 PM, Mark Felder wrote: On Mon, Dec 21, 2015, at 08:40, Julian Elischer wrote: This is EXACTLY what the cisco/ironport web filter appliance does... If we had this in FreeBSD nobody would have to reinvent the wheel to build a

Re: kern/156180

2011-04-06 Thread Karim Fodil-Lemelin
The following reply was made to PR kern/156180; it has been noted by GNATS. From: Karim Fodil-Lemelin fodillemlinka...@gmail.com To: Gleb Smirnoff gleb...@freebsd.org Cc: Subject: Re: kern/156180 Date: Wed, 6 Apr 2011 14:07:08 -0400 --000e0cd5d1826dc62504a043dcf6 Content-Type: text/plain