kern/179392: [pf] [ip6] Incorrect TCP checksums in rdr return packets

David Thiel lx at freebsd.org
Tue Feb 11 01:30:01 UTC 2014


The following reply was made to PR kern/179392; it has been noted by GNATS.

From: David Thiel <lx at freebsd.org>
To: bug-followup at FreeBSD.org, paul at semiocast.com
Cc:  
Subject: Re: kern/179392: [pf] [ip6] Incorrect TCP checksums in rdr return
 packets
Date: Mon, 10 Feb 2014 17:23:49 -0800

 I've replicated this issue as well, on 10.0-RELEASE, amd64. With jails
 running on a cloned lo1, outbound IPv6 works fine, but pf redirect
 traffic gets results in incorrect checksums and traffic being dropped.
 Loopback interfaces no longer seem to support the -txcsum6 or -rxcsum6
 flags. Would love to have a fix for this, as it kind of breaks the
 "service jail" model for IPv6.
 
 Cheers,
 David


More information about the freebsd-pf mailing list