pf killing NFS

[Charles Sprickman]

On Wed, 13 Dec 2006, Pete French wrote:

>> I'm running a 6.2-RC1 box (cvsup'd today) that has two broadcom nics.  One
>> is an internal network (nfs) and the other is external.
> ...
>> Doing something like "ls /usr/ports" will just hang until interrupted.
>> Using tcp for nfs makes it workable, but very slow.
>
> Oddly enough I hit precisely this problem last night - with a cvsup from a
> few days ago. I have tried adding the 'no-df' flag to the scrub rules, but this
> did not help much. What I ended up doing was this:

I pulled the "scrub in all" line and replaced it with a "scrub in on 
bge0".  I don't really care about scrubbing on the internal network.  All 
works as expected now.

Glad to have the bad checksum error explained, that had me thinking I'd be 
visiting the co-lo to track down a flakey cable. :)

Charles

> scrub in on bge0 proto tcp fragment reassemble random-id
>
> so that I am not scrubbing UDP traffic. this works fine.
>
> -pete.
>