[Bug 207598] pf adds icmp unreach on gre/ipsec somehow

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207598

--- Comment #35 from Max <maximos at als.nnov.ru> ---
(In reply to Kristof Provost from comment #33)
Now I see that...
                } else if (pd->proto != IPPROTO_ICMP && af == AF_INET &&
                    r->return_icmp)
                        pf_send_icmp(m, r->return_icmp >> 8,
                            r->return_icmp & 255, af, r);
                else if (pd->proto != IPPROTO_ICMPV6 && af == AF_INET6 &&
                    r->return_icmp6)
                        pf_send_icmp(m, r->return_icmp6 >> 8,
                            r->return_icmp6 & 255, af, r);

block return ... proto tcp
works as expected.

-- 
You are receiving this mail because:
You are the assignee for the bug.