Re: maybe bug in version 4.1.28

"Michael T. Davis" <[email protected]> Fri, 04 May 2012 12:17:26 -0400 (EDT)
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <31404_1336148270_4FA4012E_31404_8028_1_01OF31VD9MEQ8XJ5UP@ecr6.ohio-state.edu>
At 11:57:21.06 on 4-MAY-2012 in message
<31404_1336146947_4FA3FC02_31404_7854_1_4FA2A613.1000103@a1poweruser.com>,
Fbsd8 <[email protected]> wrote:

>Darren Reed wrote:
>> 
>> I almost certainly guarantee you that this is to do with the different
>> NIC chips having different capabilities such as hardware checksum
>> and that these are interfering with ipfilter.
>> 
>> Darren
>> 
>
>Ok I believe you that is the cause of the problem.
>So this is really a bug in ipfilter that needs correction.
>Since this was not the case in the past when motherboards
>did not have built in Nics and since the pc manufactures have
>standardized on including nics on motherboards that offload some
>processes to the chip hardware for better performance, It seems only
>logical that ipfilter needs to be updated to be aware of these hardware
>process and take the correct action so the reported error condition does
>not occur any more. This problem is a SHOW STOPPER.
>
>Are you going to address this?
>
>

	Where might we find the full thread of this topic?  Reading between
the lines, is it recommended that we should not enable NIC-based offload
processing under ipfilter?

Regards,
Mike