It begins to look like OpenBSD does fix IP checksums on bridges outside
of pf, while FreeBSD doesn't.

The weird thing is that I haven't found where exactly this happens. It's
kind of a layer violation for bridge code to do that, but maybe it's
somewhere else along the code path.

Instead of adding checksum fixup code again, I think it's better to take
a step back and find out why the checksums are correct on OpenBSD. The
previous fixes assumed the checksums would be wrong on OpenBSD as well,
but they related to pf actions more subtle than basic fragment
reassembly.

Daniel
_______________________________________________
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to