> I'm not suggesting it's PF's fault (hence the quotes around "broken"). 
> If you've followed recent developments, you'd understand the reason
> Linux NFS doesn't work through normalized PF (scrub) is that the PF
> developers refused to respect the DF bit on fragmented Linux NFS traffic
> without understanding WHY in the hell they wanted to do it that way.

It's not that we refused to respect it.  We respect it.  Hell, we even
admit it makes sense in some situations.  But it is open for ambiguous
interpretation and thus SCRUB must normalize it away.
 
.mike

Reply via email to