Randy Beaudreault wrote:
What version of ipf allows PMTUD ICMP packets as part of keep state?
All, 3.4, afaik. That's what keep state does. It allows ANY replated
packet regardless of protocol - and provided IPF can understand how
it's related. IPF has known about ICMP relations to TCP and UDP
since I've been using it for 4+ years...
So with a rule like this:
pass in quick proto tcp from any to 192.x.x.x/32 port = 80 flags S keep state
I wouldn't have to add the corresponding rule for Path MTU Discovery?
--
Randy
OS X - UNIX for the rest of us
NetBSD - Catch the Power!
