Regression with jails/IPv6/pf

Bjoern A. Zeeb bzeeb-lists at lists.zabbadoz.net
Wed Aug 1 18:23:19 UTC 2012


On Wed, 1 Aug 2012, Matthew Seaman wrote:

> On 01/08/2012 18:13, Bjoern A. Zeeb wrote:
>
>> Any of you who are expereincing problems with packets dropped due to
>> invalid checksums with IPv6 and pf after the recent merges, can you
>> report back if you also see this without "modulate state" in your
>> pf.conf (if you have 'modulate' in there, can you try changing it to
>> 'keep' and see if that fixes the problem)?
>
> Alas, I was already using 'keep state'.  I did just try 'modulate
> state,' just on the off-chance but it makes no difference.

Modulate would only make it worse.

-- 
Bjoern A. Zeeb                                 You have to have visions!
          Stop bit received. Insert coin for new address family.


More information about the freebsd-stable mailing list