pf example incorrectly blocks icmp unreach
The PF example at http://www.openbsd.org/faq/pf/example1.html should add unreach to the icmp types, otherwise path mtu discovery won't work. -- Bruce Cran
Re: pf example incorrectly blocks icmp unreach
On 2012/05/14 21:14, Bruce Cran wrote: The PF example at http://www.openbsd.org/faq/pf/example1.html should add unreach to the icmp types, otherwise path mtu discovery won't work. Thanks for the feedback but this is not necessary, PF state tracking automatically includes ICMP packets relevant