Re: maybe bug in version 4.1.28
"Michael T. Davis" <[email protected]> Fri, 04 May 2012 12:17:26 -0400 (EDT)
| Newsgroups | gmane.comp.security.firewalls.ipfilter |
|---|---|
| Message-ID | <31404_1336148270_4FA4012E_31404_8028_1_01OF31VD9MEQ8XJ5UP@ecr6.ohio-state.edu> |
At 11:57:21.06 on 4-MAY-2012 in message <31404_1336146947_4FA3FC02_31404_7854_1_4FA2A613.1000103@a1poweruser.com>, Fbsd8 <[email protected]> wrote: >Darren Reed wrote: >> >> I almost certainly guarantee you that this is to do with the different >> NIC chips having different capabilities such as hardware checksum >> and that these are interfering with ipfilter. >> >> Darren >> > >Ok I believe you that is the cause of the problem. >So this is really a bug in ipfilter that needs correction. >Since this was not the case in the past when motherboards >did not have built in Nics and since the pc manufactures have >standardized on including nics on motherboards that offload some >processes to the chip hardware for better performance, It seems only >logical that ipfilter needs to be updated to be aware of these hardware >process and take the correct action so the reported error condition does >not occur any more. This problem is a SHOW STOPPER. > >Are you going to address this? > > Where might we find the full thread of this topic? Reading between the lines, is it recommended that we should not enable NIC-based offload processing under ipfilter? Regards, Mike