Re: Problem with pf: rdr and icmp

2007-07-09 Thread Jason Eggleston
Henning wrote: that sounds like what mpf fixed a few days ago... pls update and retry Thanks, I updated to the July 5th snapshot and it works now. Did some more research with wireshark, it was the ICMP checksum that was incorrect originally, but only on the first packet of the session. tcpdump

Re: Problem with pf: rdr and icmp

2007-07-09 Thread Henning Brauer
* Jason Eggleston <[EMAIL PROTECTED]> [2007-07-09 08:29]: > I think there is a bug in redirecting ICMP echo requests in the current pf. that sounds like what mpf fixed a few days ago... pls update and retry -- Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED] BS Web Services, http://bsws.de F

Problem with pf: rdr and icmp

2007-07-08 Thread Jason Eggleston
Hello, I think there is a bug in redirecting ICMP echo requests in the current pf. I have an OpenBSD firewall currently allowing pings. In that configuration, the firewall itself responds to the pings and everything works as expected. If I decide to redirect that ping via binat or rdr, the firs