PR kern/93849 IP checksum broken by pf no-df over bridge

[Pieter de Boer]

Adam McDougall wrote:

> Could someone possibly take a look at this and let me know if it
> looks 'broken' or if I might be doing something wrong?  I am in 
> a crunch to choose a firewall solution within a few weeks and it
> would help me to know if this issue can be solved.  FreeBSD/pf
> seemed an appropriate solution so far, especially since it has 
> CARP, pfsync, (and altq which im not using (yet?)).
You could try compiling pf using CFLAGS=-O instead of -O2. This fixed a 
checksum problem I had. That probably was an entirely different issue, 
but perhaps it does help..

-- 
Pieter