On Fri, Nov 09, 2018 at 06:57:16PM +0100, Claudio Jeker wrote: > I would prefer to remove this errno translation magic for pf(4) in the > midlayer of the network code. As shown it is always prone for errors.
Yes. I always confuses me when I see "no route to host" if pf blocks the packet. If a programm cannot cope with "permission denied" from socket operations, we can fix it. bluhm