On Thu, Apr 20, 2006 at 10:43:21AM +0200, Janne Johansson wrote: > Lars Weste wrote: > >Hi, > > > >with scrub in all set at the firewall, will openbsd handle icmp packets > >of type unreach code needfrag automatically, because of the statefulness? > > scrub no-df fixes this, no?
Yes, at the cost of such features as Path MTU Discovery.
Joachim
