Re: checksum offload problem freebsd

Andrew White <[email protected]> Wed, 18 Jan 2012 00:15:40 +0000
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <16213_1326845818_4F160F78_16213_6139_1_CAOZMOUFF8GDtjLkBHdQjwSi3zL5_ZD7fFMM==uy2GRZ=sx0pUw@mail.gmail.com>
--00235446ff3c44636f04b6c25aa9
Content-Type: text/plain; charset=ISO-8859-1

Hi,

Another colleague has pointed out

if_fxp in FreeBSD 7/8 adds hardware checksum support for the 82559, but not
on the pseudo header. This triggers a bug in ipfilter (where it incorrectly
calculates the pseudo header checksum by itself), so the patch from the PR
should actually work.

The reason why it worked in 6.4 is because 6.4 didn't support hardware
checksumming on 82559 at all.


With the patch applied from the PR, it now works as expected (freebsd 8.2
with ipfilter 1.4.34)

Can this patch be added to ipfilter upstream please ?

Thanks

Andrew

--00235446ff3c44636f04b6c25aa9
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi,<div><br></div><div>Another=A0colleague=A0has pointed out<div><br></div>=
<blockquote style=3D"margin:0 0 0 40px;border:none;padding:0px"><div><span =
style>if_fxp in FreeBSD 7/8 adds hardware checksum support for the 82559, b=
ut not on the pseudo header. This triggers a bug in ipfilter (where it inco=
rrectly calculates the pseudo header checksum by itself), so the patch from=
 the PR should actually work.</span></div>

<div><br style></div><div><span style>The reason why it worked in 6.4 is be=
cause 6.4 didn&#39;t support hardware checksumming on 82559 at all.</span>=
=A0</div></blockquote><div><br></div><div>With the patch applied from the P=
R, it now works as expected (freebsd 8.2 with ipfilter 1.4.34)</div>

<div><br></div><div>Can this patch be added to ipfilter upstream please ?</=
div><div><br></div><div>Thanks</div><div><br></div><div>Andrew</div></div>

--00235446ff3c44636f04b6c25aa9--