Re: (was: Regression with jails/IPv6/pf) 'scrub reassemble tcp' breaks IPv6 packet checksum on SYN ACK

2012-10-13 Thread Mark Martinec
Bjoern A. Zeeb wrote on 2012-08-01: Any of you who are expereincing problems with packets dropped due to invalid checksums with IPv6 and pf after the recent merges, can you report back if you also see this without modulate state in your pf.conf (if you have 'modulate' in there, can you try

Re: nc: connect to b:b:b:b::1:1 port 53 (tcp) failed: Operation timed out

2012-12-29 Thread Mark Martinec
On Saturday December 29 2012 10:48:41 Michael Grimm wrote: - Disabling PF at 9.1 allows outgoing tcp6 to 9.1 with enabled PF. Thus, it seems to me that the pf code in 9.1 is responsible for screwing tcp6. Make sure to have 'scrub reassemble tcp' off: misc/172648: pf(4): 'scrub reassemble

Re: Future of pf in FreeBSD ? - does it have one ?

2014-07-09 Thread Mark Martinec
On 2014-07-09 0:32, Kristian K. Nielsen wrote: f) IPv6 support?- it seem to be more and more challenged in the current version of pf in FreeBSD and I am (as well as others) introducing more and more IPv6 in networks. E.x. Bugs #179392, #172648, #130381, #127920 and more seriously #124933, which

Re: Future of pf in FreeBSD ? - does it have one ?

2014-07-10 Thread Mark Martinec
On 2014-07-09 17:30, Ermal Luçi wrote: On Wed, Jul 9, 2014 at 2:42 PM, Mark Martinec mark.martinec+free...@ijs.si wrote: On 2014-07-09 0:32, Kristian K. Nielsen wrote: f) IPv6 support?- it seem to be more and more challenged in the current version of pf in FreeBSD

Re: Future of pf in FreeBSD ? - does it have one ?

2014-07-10 Thread Mark Martinec
me wrote: It compiles just fine, but can't be loaded or run. If memory serves, pf kernel module loads fine but pfctl fails, and the ipfw kernel module can't be loaded at all. Will need to re-run this experiment to make sure, and will report back. Updating my statement after checking with