[Bug 207598] pf adds icmp unreach on gre/ipsec somehow

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207598

--- Comment #33 from Kristof Provost <kp at freebsd.org> ---
(In reply to Max from comment #30)
Was this with TCP/UDP or ICMP?

Note that pf doesn't generate ICMP error messages for anything other than UDP
(and TCP RST for TCP):

           return    A TCP RST is returned for blocked TCP packets, an ICMP
                     UNREACHABLE is returned for blocked UDP packets, and all
                     other packets are silently dropped.

-- 
You are receiving this mail because:
You are the assignee for the bug.