Bug 208091

Summary:	net.inet.ipsec.dfbit=2 not working
Product:	Base System	Reporter:	aigars
Component:	kern	Assignee:	Andrey V. Elsukov <ae>
Status:	Closed FIXED
Severity:	Affects Many People	CC:	ae, gnn, ports, sbruno
Priority:	---	Keywords:	easy, patch
Version:	10.2-RELEASE
Hardware:	Any
OS:	Any

Description aigars 2016-03-17 15:46:47 UTC

sys/netipsec/ipsec_output.c line 483:

setdf = ntohs(ip->ip_off & IP_DF);

Should be:
setdf = ntohs(ip->ip_off) & IP_DF;

Comment 1 Andrey V. Elsukov freebsd_committer

2019-05-20 10:44:52 UTC

The problem was fixed in 11.x+ releases. But 10.x has reached EOL.

Comment 2 Kubilay Kocak freebsd_committer

2019-05-20 23:36:39 UTC

Correct resolution (FIXED: resolved by a change: commit)

Fixed in base r297014 (head at the time, became stable/11)