https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207598
--- Comment #34 from Max <[email protected]> --- (In reply to Kristof Provost from comment #33) Yeah, that's my fault... It is ICMP. But man pf.conf says return This causes a TCP RST to be returned for tcp(4) packets and an ICMP UNREACHABLE for UDP and other packets. (In reply to Kristof Provost from comment #32) I'm trying to understand what's happening... Without the patch: ruleset 1: scrub on gre1 pass log (all) all block return out log (all) on gre1 proto icmp ICMP-unreach exists. ruleset 2: scrub on gre1 pass log (all) all block return in log (all) on gre0 proto icmp ICMP-unreach doesn't exist. Should it? ruleset 3: scrub on gre0 scrub on gre1 pass log (all) all block return in log (all) on gre0 proto icmp ICMP-unreach doesn't exist. I've rebuilt the kernel... again... the patched version. There is no ICMP-unreach at all. So, the first case is relevant to patch, I think... -- You are receiving this mail because: You are the assignee for the bug. _______________________________________________ [email protected] mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "[email protected]"
