On Tue, Aug 21, 2007 at 04:16:51PM +0200, Jacek Zapala wrote: > I have disabled this on sending side (FreeBSD) and it started to work!
Ah, so it's related to window scaling. Headaches again ;) Is the following a correct view of your setup: src ---- $int_if pf $ext_if ---- router ---- dst Where client src connects to server dst, and you create the state entry when the initial TCP SYN goes out $ext_if on the firewall? The ICMPv6 is coming in on $ext_if, in the reverse direction, relative to the initial TCP SYN? And the router is between pf and dst, on the $ext_if side? Daniel _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"
