[Bug 207598] pf adds icmp unreach on gre/ipsec somehow

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Tue May 24 13:54:35 UTC 2016


--- Comment #8 from Max <maximos at als.nnov.ru> ---
(In reply to emz from comment #7)
fragment reassemble
           Using scrub rules, fragments can be reassembled by normalization.
           In this case, fragments are buffered until they form a complete
           packet, and only the completed packet is passed on to the filter.
           ...  This is
           the default behavior of a scrub rule if no fragmentation modifier
           is supplied.

Thus the rule 
1. reassembles and fixes mss of tcp packets
2. reassembles other packets

I think "scrub in proto tcp ..." should affect tcp packets only.

You are receiving this mail because:
You are the assignee for the bug.

More information about the freebsd-pf mailing list