Checksumming outgoing packets in PF vs in ip[6]_output

J David j.david.lists at gmail.com
Thu Nov 13 20:30:52 UTC 2014


On Wed, Nov 5, 2014 at 9:28 AM, Ilya Bakulin <ilya at bakulin.de> wrote:
> Of course it was interesting what does the upstream PF do (@ OpenBSD). Seems
> they have made the decision to
> leave the task of recalculating the checksums for outgoing packets to
> ip[6]_output, because currently
> the code there overwrites the checksum anyway.
> This seems a correct way to me. pf should not longer do any checksum updates
> in inbound and outbound path.

Is there any chance this change would help with bug 179392 as well?

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=179392

Or is that a separate issue?

Thanks!


More information about the freebsd-net mailing list