Re: checksum offload problem freebsd
Andrew White <[email protected]> Wed, 18 Jan 2012 00:15:40 +0000
| Newsgroups | gmane.comp.security.firewalls.ipfilter |
|---|---|
| Message-ID | <16213_1326845818_4F160F78_16213_6139_1_CAOZMOUFF8GDtjLkBHdQjwSi3zL5_ZD7fFMM==uy2GRZ=sx0pUw@mail.gmail.com> |
--00235446ff3c44636f04b6c25aa9 Content-Type: text/plain; charset=ISO-8859-1 Hi, Another colleague has pointed out if_fxp in FreeBSD 7/8 adds hardware checksum support for the 82559, but not on the pseudo header. This triggers a bug in ipfilter (where it incorrectly calculates the pseudo header checksum by itself), so the patch from the PR should actually work. The reason why it worked in 6.4 is because 6.4 didn't support hardware checksumming on 82559 at all. With the patch applied from the PR, it now works as expected (freebsd 8.2 with ipfilter 1.4.34) Can this patch be added to ipfilter upstream please ? Thanks Andrew --00235446ff3c44636f04b6c25aa9 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hi,<div><br></div><div>Another=A0colleague=A0has pointed out<div><br></div>= <blockquote style=3D"margin:0 0 0 40px;border:none;padding:0px"><div><span = style>if_fxp in FreeBSD 7/8 adds hardware checksum support for the 82559, b= ut not on the pseudo header. This triggers a bug in ipfilter (where it inco= rrectly calculates the pseudo header checksum by itself), so the patch from= the PR should actually work.</span></div> <div><br style></div><div><span style>The reason why it worked in 6.4 is be= cause 6.4 didn't support hardware checksumming on 82559 at all.</span>= =A0</div></blockquote><div><br></div><div>With the patch applied from the P= R, it now works as expected (freebsd 8.2 with ipfilter 1.4.34)</div> <div><br></div><div>Can this patch be added to ipfilter upstream please ?</= div><div><br></div><div>Thanks</div><div><br></div><div>Andrew</div></div> --00235446ff3c44636f04b6c25aa9--