IPF and ECN

[Patrick Oonk <patrick () pine nl>]

Hi,

My IPF firewall is barfing about packets containing
ECN information (Explicit Congestion Notification,
http://www.aciri.org/floyd/ecn.html). 
The strange thing is, that it does not log WHY, just
that it blocked the packet. I have been reading the
ipf docs and I see no way to pass packets containing that 
extra information. I think that IPF just expects the
position in the packet to be zero and blocks it.

I have also looked into newer versions of IPF, and found
no info about the processing of ECN info.
        
Any clues ?

-- 
 Patrick Oonk -  PO1-6BONE -  patrick () pine nl -  www.pine.nl/~patrick
 Pine Internet - PAT31337-RIPE - PGPkeyID BE7497F1 - XOIP+31208723350 
 Tel: +31-70-3111010  -   Fax: +31-70-3111011   -  http://security.nl
 PGP   fingerprint   97 27 CB 46 25 39 66 77  F8 BF C3 93 4A EC 21 D6
 Excuse of the day: pizeo-electric interference

_______________________________________________
Firewall-wizards mailing list
Firewall-wizards () nfr net
http://www.nfr.net/mailman/listinfo/firewall-wizards