Regression with jails/IPv6/pf

Bjoern A. Zeeb bzeeb-lists at
Wed Aug 1 18:23:19 UTC 2012

On Wed, 1 Aug 2012, Matthew Seaman wrote:

> On 01/08/2012 18:13, Bjoern A. Zeeb wrote:
>> Any of you who are expereincing problems with packets dropped due to
>> invalid checksums with IPv6 and pf after the recent merges, can you
>> report back if you also see this without "modulate state" in your
>> pf.conf (if you have 'modulate' in there, can you try changing it to
>> 'keep' and see if that fixes the problem)?
> Alas, I was already using 'keep state'.  I did just try 'modulate
> state,' just on the off-chance but it makes no difference.

Modulate would only make it worse.

Bjoern A. Zeeb                                 You have to have visions!
          Stop bit received. Insert coin for new address family.

More information about the freebsd-stable mailing list