Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
From: Daniel Hartmeier (dhartmei_at_cvs.openbsd.org)
Date: Wed Feb 12 2003 - 14:43:36 CST
Module name: src
Changes by: dhartmeicvs.openbsd.org 2003/02/12 13:43:36
sys/net : pf_norm.c
Address the NFS problems recently discussed in various threads.
Change semantics of scrub option 'no-df' slightly: if the option is used,
it now also applies to _fragments_ with IP_DF set, not just to complete
packets. Hence, adding 'no-df' to 'scrub in all fragment reassemble'
allows to clear IP_DF from fragments, so they don't get dropped but
This affects several UDP protocols that used PMTU discovery, mostly
Linux' NFS implementation. In short, if you have 'scrub in all' now,
you probably want to change that to 'scrub in all no-df', unless you
want to drop fragments with IP_DF set (some people have good reasons
to do the latter, hence the non-default option).
ok frantzen, henning, cedric