On 21.10.2014 00:00, Matthew Grooms wrote: > On 10/20/2014 2:47 PM, Andrey V. Elsukov wrote: >> On 20.10.2014 20:18, Matthew Grooms wrote: >>> Lastly, I tried to locate a relevant PR but didn't find anything >>> concrete. Is this related to the issue? And if so, can it be MFCd? >>> >>> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=110959 >> >> Did you try the patch from last PR? It is small and should be applicable >> to stable/10. >> > > As I mentioned, it's not clear to me if the patch was intended to fix > the issue that I am describing. Is that the case? If so, I would be > happy to apply it and report back. These are production firewalls, so > I'd prefer to have some feedback before calculating that risk.
This commit fixes similar problem with ipfw in 11.0-CURRENT. But I think it won't help you with pf in 10. I guess r266800 is what you need. -- WBR, Andrey V. Elsukov
signature.asc
Description: OpenPGP digital signature