CVSROOT: /cvs
Module name: src
Changes by: bl...@cvs.openbsd.org 2015/08/24 17:12:53
Modified files:
regress/sys/net/pf_fragment: Makefile pf.conf ping6_mtu_1300.py
ping_cksum.py ping_mtu_1300.py
udp_cksum.py
regress/sys/net/pf_forward: Makefile pf.conf ping6_mtu.py
ping_mtu.py
Log message:
Extend the pf forward and fragment tests with a second challenge
for path MTU discovery. The router behind the pf machine has MTU
1300. The ICMP packet generated by the router matches the pf state
and is NATed correctly. Additionally the pf machine itself has an
interface MTU 1400. So when pf is sending a packet is has to
generate a correct "fragmentation needed" or "packet too big" ICMP
response. This is done with pf route-to and reply-to.
