On Tue, 7 Mar 2017 13:49:25 +0000, bugzilla-nore...@freebsd.org wrote:
> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=216867
>
> Mark Felder <f...@freebsd.org> changed:
>
> What |Removed |Added
> ----------------------------------------------------------------------------
> CC| |f...@freebsd.org
>
> --- Comment #1 from Mark Felder <f...@freebsd.org> ---
> Needs some testers, but this should fix it
>
> https://reviews.freebsd.org/D9920
I've always used these rules from 'client' and 'simple' rulesets:
${fwcmd} add pass all from any to any frag
which I long ago found essential to pass frags from zen.spamhaus.org
I haven't used reass - nor DNSSEC - so can't really evaluate, nor test
currently, so I won't pollute the bug report with what may be musing.
However, looking at the review patch, I do wonder if the reass shouldn't
precede, rather than follow, the check-state?
cheers, Ian
_______________________________________________
freebsd-ipfw@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"
