[Bug 272749] ndp(8): correct a few xo_emit formats

2024-09-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=272749 Helge Oldach changed: What|Removed |Added Attachment #244806|0 |1 is obsolete|

[Bug 272749] ndp(8): correct a few xo_emit formats

2024-09-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=272749 Helge Oldach changed: What|Removed |Added Version|13.2-STABLE |14.1-STABLE -- You are receiving t

Problem reports for n...@freebsd.org that need special attention

2024-09-01 Thread bugzilla-noreply
To view an individual PR, use: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=(Bug Id). The following is a listing of current problems submitted by FreeBSD users, which need special attention. These represent problem reports covering all versions including experimental development code and ob

[Bug 272749] ndp(8): correct a few xo_emit formats

2024-09-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=272749 Zhenlei Huang changed: What|Removed |Added Assignee|n...@freebsd.org |z...@freebsd.org U

[Bug 280701] FreeBSD-SA-24:05 fix breaks ICMP/ICMP6 states handling in pf firewall (ping, traceroute)

2024-09-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280701 --- Comment #62 from commit-h...@freebsd.org --- A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=5ab1e5f7e5585558a73b723f07528977a82cee82 commit 5ab1e5f7e5585558a73b723f07528977a82cee82 Author:

Re: dropping udp fragments with ipfw

2024-09-01 Thread Paul Vixie
with "add pass udp" one creates a rule that permits initial fragments of a datagram, or unfragmented datagram, to pass. if this doesn't happen, then no subsequent fragment will matter even if allowed through -- because there will be no endpoint state to allow those fragments to be reassembled. s

[Bug 280701] FreeBSD-SA-24:05 fix breaks ICMP/ICMP6 states handling in pf firewall (ping, traceroute)

2024-09-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280701 --- Comment #63 from Dirk Meyer --- Thanks. As a possible workaround for affected systems can be an additional rule like this: pass in quick inet6 proto icmp6 no state If you are not afraid of icmp echo. -- You are receiving this mail