From owner-freebsd-pf@FreeBSD.ORG  Thu Nov 19 10:15:27 2009
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id EB516106566B;
	Thu, 19 Nov 2009 10:15:27 +0000 (UTC) (envelope-from mohacsi@niif.hu)
Received: from mail.ki.iif.hu (mail.ki.iif.hu [IPv6:2001:738:0:411::241])
	by mx1.freebsd.org (Postfix) with ESMTP id 6AB878FC16;
	Thu, 19 Nov 2009 10:15:27 +0000 (UTC)
Received: from localhost (localhost [IPv6:::1])
	by mail.ki.iif.hu (Postfix) with ESMTP id 40E6C85312;
	Thu, 19 Nov 2009 11:15:26 +0100 (CET)
X-Virus-Scanned: by amavisd-new at mignon.ki.iif.hu
Received: from mail.ki.iif.hu ([127.0.0.1])
	by localhost (mignon.ki.iif.hu [127.0.0.1]) (amavisd-new, port 10024)
	with LMTP id 4UiDk-mfH0LA; Thu, 19 Nov 2009 11:15:22 +0100 (CET)
Received: by mail.ki.iif.hu (Postfix, from userid 9002)
	id 7D9E5847EC; Thu, 19 Nov 2009 11:15:22 +0100 (CET)
To: FreeBSD-gnats-submit@freebsd.org
From: Mohacsi Janos <mohacsi@niif.hu>
X-send-pr-version: 3.113
X-GNATS-Notify: 
Message-Id: <20091119101522.7D9E5847EC@mail.ki.iif.hu>
Date: Thu, 19 Nov 2009 11:15:22 +0100 (CET)
Cc: freebsd-pf@freebsd.org
Subject: pf behaviour changes - must be documented
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Mohacsi Janos <janos.mohacsi@bsd.hu>
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Nov 2009 10:15:28 -0000


>Submitter-Id:	current-users
>Originator:	Mohacsi Janos
>Organization:	NIIF
>Confidential:	no 
>Synopsis:	pf behaviour changes - must be documented
>Severity:	non-critical
>Priority:	low
>Category:	kern
>Class:		doc-bug
>Release:	FreeBSD 6.4-STABLE i386
>Environment:
System: FreeBSD mignon.ki.iif.hu 6.4-STABLE FreeBSD 6.4-STABLE #18: Tue Oct 27 16:19:23 CET 2009 root@mignon.ki.iif.hu:/usr/obj/usr/src/sys/MIGNON2 i386


	
>Description:
	The pf behaviour about the fragmented packets has been changed since 
FreeBSD 6.4-STABLE #17: Fri Jul  3 14:34:44 CEST 2009

At least to FreeBSD 6.4-STABLE #18: Tue Oct 27 16:19:23 CET 2009.

Before some changes in pf it was working without scrubbing. After the changes:
scrub in on <interface> no-df

must be configured to proper operation....

>How-To-Repeat:
	try earlier version of FreeBSD and latest 6.4 stable.
>Fix:

Document this pf changes .