Re: pf corrupting packet checksums?

2010-12-29 Thread Stuart Henderson
On 2010/12/29 08:51, Johan Helsingius wrote: Running pf on openbsd 4.8 (i386), I find something very strange going on. Looking at the log: Dec 28 22:23:37.772604 rule 4/(match) [uid 0, pid 28161] pass in on xl2: xxx.yyy.zzz.aaa.51717 foo.bar.www: S [tcp sum ok] 3754046362:3754046362(0) win

Re: pf corrupting packet checksums?

2010-12-29 Thread Claudio Jeker
On Wed, Dec 29, 2010 at 10:40:58AM +, Stuart Henderson wrote: On 2010/12/29 08:51, Johan Helsingius wrote: Running pf on openbsd 4.8 (i386), I find something very strange going on. Looking at the log: Dec 28 22:23:37.772604 rule 4/(match) [uid 0, pid 28161] pass in on xl2:

Re: pf corrupting packet checksums?

2010-12-29 Thread Johan Helsingius
Claudio, This is because of delayed checksum calculation in ip_output. Thanks for the explanation! Julf