On Sat, Jul 12, 2014 at 8:56 PM, Blake Cornell <bcorn...@integrissecurity.com> wrote: > Its a TCP traceroute, not UDP nor ICMP. I need to provide TCP based > services. > > I would prefer staying within the framework of the interface or nominal BSD > magic. >
Makes a little more sense in that context, but the point still stands, what does it matter. Hacking /etc/inc/filter.inc to add min-ttl as desired to the scrub lines wouldn't be too difficult, but it wouldn't survive upgrades. A reverse proxy is possibly a better solution. _______________________________________________ List mailing list List@lists.pfsense.org https://lists.pfsense.org/mailman/listinfo/list