[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openbsd-pf
Subject:    Re: more on my question : DNS answers blocked?
From:       Daniel Hartmeier <daniel () benzedrine ! cx>
Date:       2007-03-06 15:20:05
Message-ID: 20070306152005.GQ16493 () insomnia ! benzedrine ! cx
[Download RAW message or body]

Looks like the blocked packets were IP fragments. For stateful
filtering, IP fragments must be reassembled, try adding

  scrub in fragment reassemble

at the top of your ruleset.

Daniel
[prev in list] [next in list] [prev in thread] [next in thread]