On Mon, Jul 21, 2014 at 04:25:46PM -0400, Michael Stone wrote: > Problem persists on 5.6. Further testing suggests that this may only be > happening if the packets exit the firewall via an ip6 tunnel (tun(4) > interface). I am not seeing the problem between vlans on the same physical > network using the same pf rule.
Can you discribe you setup a bit more? What application do you run on tun? aiccu? ifconfig tun? Are the packets forwarded or locally generated? Where and how do you measure the checksum 0? Can you provide tpcdump -X before and after the tunnel encapsulation? On which interface do you redirect? Are those incomming packets on tun? bluhm [demime 1.01d removed an attachment of type application/pgp-signature]
