pf example incorrectly blocks icmp unreach

2012-05-14 Thread Bruce Cran
The PF example at http://www.openbsd.org/faq/pf/example1.html should add unreach to the icmp types, otherwise path mtu discovery won't work. -- Bruce Cran

Re: pf example incorrectly blocks icmp unreach

2012-05-14 Thread Stuart Henderson
On 2012/05/14 21:14, Bruce Cran wrote: The PF example at http://www.openbsd.org/faq/pf/example1.html should add unreach to the icmp types, otherwise path mtu discovery won't work. Thanks for the feedback but this is not necessary, PF state tracking automatically includes ICMP packets relevant