On 2011/03/02 18:50, Alexander Bluhm wrote: > Here is a diff that reassembles IPv6 fragments in pf. In the forward > case, it refragments the packets with the same size to allow Path-MTU > discovery.
No immediate problems, I haven't tested a lot yet but certainly v6 fragments are getting through. Hooray, I can get rid of the nasty 'edns-buffer-size 1200' big hammer from my nameserver configs and avoid hangs from the OARC reply size tester and when looking up isc.org names. :-)
