Re: 3.2 pf.conf problems and miscellaneous crashes

[uid0-33@catastrophe.net]

On Sun, 2002-11-03 at 17:38:59 -0600, uid0-33@catastrophe.net wrote...

' I've noticed a couple problems under 3.2 .... mainly the following...
' 

[snip]

I posted a mail last night regarding some problem with fragmenting in 
pf under 3.2.

Here's what I've found...

  # tcpdump -n -i tx0 icmp
  05:43:44.143917 10.11.12.13 > 208.45.133.104: icmp: 10.11.12.13
   unreachable - need to frag (mtu 1428)

Is happening on when I go to various web sites. Under pf on 3.1, I
can use the "scrub (in|out) all no-df" statements and it works (so
long as I don't use any "modulate state" directives.

However, under 3.2, this doesn't fix the problem and I'm in the same 
place with the "need to frag" error messages.

Are there any fixes?

Thanks (sorry for the cross post last night, I've taken the time to
properly slap my hands).

-#0