Hi, Alexander, On 01/12/2012 04:04 PM, Alexander Bluhm wrote: > I have reconsidered it and drop the fragments immediately. The > packet to be reassembled will be dropped after timeout.
Sorry: immediately, or after a timeout? Now pf > works like our IPv6 stack. > > - Sort pf_fragment fields while there. > - If the fr_queue is empty, we had overlapping fragments, don't add > new ones. Not sure what this means. P.S.: Will try your patch this weekend. Thanks! Best regards, -- Fernando Gont e-mail: [email protected] || [email protected] PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1
