From owner-freebsd-stable@FreeBSD.ORG  Wed Aug  1 18:23:19 2012
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 4B363106564A;
	Wed,  1 Aug 2012 18:23:19 +0000 (UTC)
	(envelope-from bzeeb-lists@lists.zabbadoz.net)
Received: from mx1.sbone.de (bird.sbone.de [46.4.1.90])
	by mx1.freebsd.org (Postfix) with ESMTP id EAD158FC08;
	Wed,  1 Aug 2012 18:23:18 +0000 (UTC)
Received: from mail.sbone.de (mail.sbone.de [IPv6:fde9:577b:c1a9:31::2013:587])
	(using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits))
	(No client certificate requested)
	by mx1.sbone.de (Postfix) with ESMTPS id 5405125D387B;
	Wed,  1 Aug 2012 18:23:11 +0000 (UTC)
Received: from content-filter.sbone.de (content-filter.sbone.de
	[IPv6:fde9:577b:c1a9:31::2013:2742])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by mail.sbone.de (Postfix) with ESMTPS id 6438DBE85B0;
	Wed,  1 Aug 2012 18:23:10 +0000 (UTC)
X-Virus-Scanned: amavisd-new at sbone.de
Received: from mail.sbone.de ([IPv6:fde9:577b:c1a9:31::2013:587])
	by content-filter.sbone.de (content-filter.sbone.de
	[fde9:577b:c1a9:31::2013:2742]) (amavisd-new, port 10024)
	with ESMTP id 1qHnfruMtG9N; Wed,  1 Aug 2012 18:23:09 +0000 (UTC)
Received: from nv.sbone.de (nv.sbone.de [IPv6:fde9:577b:c1a9:31::2013:138])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by mail.sbone.de (Postfix) with ESMTPSA id 19543BE8588;
	Wed,  1 Aug 2012 18:23:09 +0000 (UTC)
Date: Wed, 1 Aug 2012 18:23:08 +0000 (UTC)
From: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
To: Matthew Seaman <matthew@FreeBSD.org>
In-Reply-To: <50196965.3020807@FreeBSD.org>
Message-ID: <alpine.BSF.2.00.1208011821380.4474@ai.fobar.qr>
References: <5011902C.1070600@infracaninophile.co.uk>
	<alpine.BSF.2.00.1208011710130.4474@ai.fobar.qr>
	<50196965.3020807@FreeBSD.org>
X-OpenPGP-Key-Id: 0x14003F198FEFA3E77207EE8D2B58B8F83CCF1842
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: FreeBSD Stable List <freebsd-stable@FreeBSD.org>, freebsd-pf@FreeBSD.org
Subject: Re: Regression with jails/IPv6/pf
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Aug 2012 18:23:19 -0000

On Wed, 1 Aug 2012, Matthew Seaman wrote:

> On 01/08/2012 18:13, Bjoern A. Zeeb wrote:
>
>> Any of you who are expereincing problems with packets dropped due to
>> invalid checksums with IPv6 and pf after the recent merges, can you
>> report back if you also see this without "modulate state" in your
>> pf.conf (if you have 'modulate' in there, can you try changing it to
>> 'keep' and see if that fixes the problem)?
>
> Alas, I was already using 'keep state'.  I did just try 'modulate
> state,' just on the off-chance but it makes no difference.

Modulate would only make it worse.

-- 
Bjoern A. Zeeb                                 You have to have visions!
          Stop bit received. Insert coin for new address family.