Hi All,

I have one problem with redirection of the fragmented packets. My use case:

A mobile phone sends the RTP video stream to my server. The server has the pf 
installed. All RTP packets are redirected from the server to my PC:

|Mobile|------>---RTP---->-----|Server|------->---RTP--->-----|PC|

The small RTP packets are redirected to my PC without any problems.
The problem is with the large RTP packets that are fragmented and transmitted 
in several IP fragments. These IP fragments are not redirected to PC. The 
redirection rule at the server:

rdr on wlan0 proto udp from any to (self) port 9870 -> 192.168.0.1 port 9870

     | S e r v e r |
->--|wlan0      eth0|-->-------|PC 192.168.0.1|

It is clear that if the IP fragments are not reassembled at the server they 
cannot be redirected since the redirection rule is written for UDP packets. 
That is why I have this scrub rule at the very beginning of my pf.conf:

scrub in on wlan0 all

I thought that this rule should reassemble all the incoming fragments. The 
reassembled UDP packets should be then correctly passed through the rdr rule 
and redirected to my PC. But this does not happen.

Do you have any ideas/tips?

Thanks a lot!
Aleksej.



_______________________________________________
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"

Reply via email to