Re: pf af-to forward

2016-11-23 Thread Alexander Bluhm
On Mon, Nov 21, 2016 at 07:15:31PM +0100, Mike Belopuhov wrote: > I'm surprised this works as I'm pretty sure it didn't way back when... At least it does work with my regression tests. There I test forwarding, path MTU discovery and tracroute over a router with pf af-to. Protocols are ping, udp,

Re: pf af-to forward

2016-11-21 Thread Mike Belopuhov
On Mon, Nov 21, 2016 at 18:16 +0100, Alexander Bluhm wrote: > Hi, > > Path MTU discovery and traceroute does not always work with pf > af-to. If an incoming packet is directly put into the output path, > sending the icmp error packet is never done. As this is basically > forwarding, calling ip_f

pf af-to forward

2016-11-21 Thread Alexander Bluhm
Hi, Path MTU discovery and traceroute does not always work with pf af-to. If an incoming packet is directly put into the output path, sending the icmp error packet is never done. As this is basically forwarding, calling ip_forward() for such packets does everything that is needed. ok? bluhm I