 Re: Panic When SecureXL and NAT Are Used and a Malformed Packet Is Received
The value is number of bytes after the IP header. fwfrag_minsize needs to be 20 to ensure that a complete TCP header is received. This does mean that legitimate UDP fragments with less than 12 data bytes will be dropped if you apply this fix. |