https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=284866
Kristof Provost <k...@freebsd.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |k...@freebsd.org --- Comment #1 from Kristof Provost <k...@freebsd.org> --- Try this: ``` diff --git a/sys/netpfil/pf/pf.c b/sys/netpfil/pf/pf.c index 8bd6c72ce05f..f9715cd18166 100644 --- a/sys/netpfil/pf/pf.c +++ b/sys/netpfil/pf/pf.c @@ -7793,6 +7793,7 @@ pf_test_state_icmp(struct pf_kstate **state, struct pf_pdesc *pd, pd2.sidx = (pd->dir == PF_IN) ? 1 : 0; pd2.didx = (pd->dir == PF_IN) ? 0 : 1; pd2.m = pd->m; + pd2.kif = pd->kif; switch (pd->af) { #ifdef INET case AF_INET: ``` If that doesn't work re-try without PF_DEFAULT_TO_DROP, because that's know to be buggy in at least one other situation. Also gather state information and network captures. -- You are receiving this mail because: You are the assignee for the bug.