On Tue, Feb 12, 2008 at 07:40:14PM +0100, Helmut Schneider wrote: > Is that expected?
No, it's a bug introduced with pf.c 1.534 after 4.1 was released. http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf.c.diff?r1=1.533&r2=1.534&f=h For IPv6 TCP, calling pf_check_proto_cksum() with AF_INET will always fail. No RST will be generated, the 'proto-cksum' counter in pfctl -si output will increase instead. Henning? Daniel
