Checksumming outgoing packets in PF vs in ip[6]_output

Ilya Bakulin ilya at bakulin.de
Fri Nov 14 10:34:54 UTC 2014


Hi all,

actually with _my_ checksumming patch the rdr-to is broken completely 
:-(
So I'm waiting for Ermal to send an updated version of his patch that 
may really solve the problem!

On 2014-11-14 09:17, Ermal Luçi wrote:
> Yes confirmed it will solve that issue as well.
> 
> On Thu, Nov 13, 2014 at 9:30 PM, J David <j.david.lists at gmail.com> 
> wrote:
> 
>> On Wed, Nov 5, 2014 at 9:28 AM, Ilya Bakulin <ilya at bakulin.de> wrote:
>> > Of course it was interesting what does the upstream PF do (@ OpenBSD).
>> Seems
>> > they have made the decision to
>> > leave the task of recalculating the checksums for outgoing packets to
>> > ip[6]_output, because currently
>> > the code there overwrites the checksum anyway.
>> > This seems a correct way to me. pf should not longer do any checksum
>> updates
>> > in inbound and outbound path.
>> 
>> Is there any chance this change would help with bug 179392 as well?
>> 
>> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=179392
>> 
>> Or is that a separate issue?
>> 
>> Thanks!
>> _______________________________________________
>> freebsd-net at freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-net
>> To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"
>> 



More information about the freebsd-pf mailing list