Christian Weisgerber <[email protected]> wrote:

> Or is scrub max-mss really broken?

This has been resolved.

It has been pointed out to me that tcpdump sees the packets before
pf, so the inbound mss fixup hasn't been applied yet.  Looking at
packets routed to another host shows that max-mss scrubbing for v4
works in both directions.

max-mss for v6 is indeed missing, but this is being fixed.

-- 
Christian "naddy" Weisgerber                          [email protected]

Reply via email to