[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087

--- Comment #34 from g_amanakis at yahoo.com ---
The only hypothesis I have is that when fragmentation is needed for an outgoing
packet (I have no idea why) and the client sending this packet is behind NAT,
the gateway cannot see the real IP of the client in order to send him the
ICMP-fragmentation-required because the icmp_error() occurs after the outgoing
packet has gone through the pfil hooks (and ipfw).

Can someone watching this report reproduce the symptoms using IPFW+NAT?

-- 
You are receiving this mail because:
You are on the CC list for the bug.