kp 40bca2754d pf: Fix TSO issues ... In certain configurations (mostly but not exclusively as a VM on Xen) pf produced packets with an invalid TCP checksum. The problem was that pf could only handle packets with a full checksum. The FreeBSD IP stack produces TCP packets with a pseudo-header checksum (only addresses, length and protocol). Certain network interfaces expect to see the pseudo-header checksum, so they end up producing packets with invalid checksums. To fix this stop calculating the full checksum and teach pf to only update TCP checksums if TSO is disabled or the change affects the pseudo-header checksum. PR: 154428, 193579, 198868 Reviewed by: sbruno MFC after: 1 week Relnotes: yes Sponsored by: RootBSD Differential Revision: https://reviews.freebsd.org/D3779		2015-10-14 16:21:41 +00:00
..
ipfw	Bump number of prefixes in O_IP_<SRC|DST> from 15 to 31 (max possible).	2015-10-03 05:42:25 +00:00
pf	pf: Fix TSO issues	2015-10-14 16:21:41 +00:00