https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=216867
Rodney W. Grimes <rgri...@freebsd.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |rgri...@freebsd.org
--- Comment #3 from Rodney W. Grimes <rgri...@freebsd.org> ---
(In reply to Helge Oldach from comment #2)
In general the reass should come before any rule that might check
a port number, as only the first packet, or a completly reassembled
packet has a port number.
So I agree it should be moved before the check state, and probably
moved even much earlier.
The other issue is that net.inet.ip.fw.one_pass must be turned on
for this to work, that change requires further considerations and
testing.
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
freebsd-ipfw@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"
