[Bug 207598] pf adds icmp unreach on gre/ipsec somehow

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207598

--- Comment #8 from Max <maximos at als.nnov.ru> ---
(In reply to emz from comment #7)
fragment reassemble
           Using scrub rules, fragments can be reassembled by normalization.
           In this case, fragments are buffered until they form a complete
           packet, and only the completed packet is passed on to the filter.
           ...  This is
           the default behavior of a scrub rule if no fragmentation modifier
           is supplied.

Thus the rule 
1. reassembles and fixes mss of tcp packets
2. reassembles other packets

I think "scrub in proto tcp ..." should affect tcp packets only.

-- 
You are receiving this mail because:
You are the assignee for the bug.