Checksumming outgoing packets in PF vs in ip[6]_output

[Ermal Luçi]

Here is a direct patch.
Give it a try.

For the reply-to issues there is another patch complementary to this i will
send.

On Fri, Nov 14, 2014 at 11:34 AM, Ilya Bakulin <ilya at bakulin.de> wrote:

> Hi all,
>
> actually with _my_ checksumming patch the rdr-to is broken completely :-(
> So I'm waiting for Ermal to send an updated version of his patch that may
> really solve the problem!
>
>
> On 2014-11-14 09:17, Ermal Luçi wrote:
>
>> Yes confirmed it will solve that issue as well.
>>
>> On Thu, Nov 13, 2014 at 9:30 PM, J David <j.david.lists at gmail.com> wrote:
>>
>>  On Wed, Nov 5, 2014 at 9:28 AM, Ilya Bakulin <ilya at bakulin.de> wrote:
>>> > Of course it was interesting what does the upstream PF do (@ OpenBSD).
>>> Seems
>>> > they have made the decision to
>>> > leave the task of recalculating the checksums for outgoing packets to
>>> > ip[6]_output, because currently
>>> > the code there overwrites the checksum anyway.
>>> > This seems a correct way to me. pf should not longer do any checksum
>>> updates
>>> > in inbound and outbound path.
>>>
>>> Is there any chance this change would help with bug 179392 as well?
>>>
>>> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=179392
>>>
>>> Or is that a separate issue?
>>>
>>> Thanks!
>>> _______________________________________________
>>> freebsd-net at freebsd.org mailing list
>>> http://lists.freebsd.org/mailman/listinfo/freebsd-net
>>> To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"
>>>
>>>
>


-- 
Ermal
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pf_ipv6_checksum.patch
Type: application/octet-stream
Size: 1009 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20141114/e3dae1f6/attachment.obj>