Re: pf icmp reflect

2021-07-26 Thread Klemens Nanni
On Mon, Jul 26, 2021 at 06:41:42PM +0200, Alexander Bluhm wrote: > The mbuf header cleanup I added in revision 1.173 of ip_icmp.c is > too strict. ICMP error packets generated by pf are not passed > immediately, but may be blocked. Preserve PF_TAG_GENERATED flag > in icmp_reflect() and icmp6_refl

Re: pf icmp reflect

2021-07-26 Thread Patrick Wildt
On Mon, Jul 26, 2021 at 06:41:42PM +0200, Alexander Bluhm wrote: > Hi, > > The mbuf header cleanup I added in revision 1.173 of ip_icmp.c is > too strict. ICMP error packets generated by pf are not passed > immediately, but may be blocked. Preserve PF_TAG_GENERATED flag > in icmp_reflect() and i

pf icmp reflect

2021-07-26 Thread Alexander Bluhm
Hi, The mbuf header cleanup I added in revision 1.173 of ip_icmp.c is too strict. ICMP error packets generated by pf are not passed immediately, but may be blocked. Preserve PF_TAG_GENERATED flag in icmp_reflect() and icmp6_reflect(). ok? bluhm Index: netinet/ip_icmp.c ===