From owner-freebsd-pf@FreeBSD.ORG  Tue Jan 27 21:46:22 2015
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id AF915817
 for <freebsd-pf@freebsd.org>; Tue, 27 Jan 2015 21:46:22 +0000 (UTC)
Received: from krichy.tvnetwork.hu (unknown [IPv6:2a01:be00:0:2::10])
 by mx1.freebsd.org (Postfix) with ESMTP id 75138F29
 for <freebsd-pf@freebsd.org>; Tue, 27 Jan 2015 21:46:22 +0000 (UTC)
Received: by krichy.tvnetwork.hu (Postfix, from userid 1000)
 id 12FE7A61B; Tue, 27 Jan 2015 22:46:20 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
 by krichy.tvnetwork.hu (Postfix) with ESMTP id 125E6A61A
 for <freebsd-pf@freebsd.org>; Tue, 27 Jan 2015 22:46:20 +0100 (CET)
Date: Tue, 27 Jan 2015 22:46:20 +0100 (CET)
From: krichy@tvnetwork.hu
To: freebsd-pf@freebsd.org
Subject: synproxy+reassemble tcp
Message-ID: <alpine.DEB.2.11.1501272244480.3000@krichy.tvnetwork.hu>
User-Agent: Alpine 2.11 (DEB 23 2013-08-11)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
 \(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf/>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 27 Jan 2015 21:46:22 -0000

Dear pf users,

I've set up a FreeBSD 10.1 pf, with

scrub all no-df random-id reassemble tcp
and synproxy rules

And synproxy does not work when 'reassemble tcp' is specified on scrub.

Any one to reproduce/confirm this?

Regards,


Kojedzinszky Richard
Euronet Magyarorszag Informatika Zrt.