From owner-freebsd-net@freebsd.org Wed Mar 15 13:10:55 2017 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 53906D0CCCB for ; Wed, 15 Mar 2017 13:10:55 +0000 (UTC) (envelope-from mike@sentex.net) Received: from smarthost2.sentex.ca (smarthost2.sentex.ca [IPv6:2607:f3e0:80:80::2]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client CN "smarthost.sentex.ca", Issuer "smarthost.sentex.ca" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id F06A21F73 for ; Wed, 15 Mar 2017 13:10:54 +0000 (UTC) (envelope-from mike@sentex.net) Received: from lava.sentex.ca (lava.sentex.ca [IPv6:2607:f3e0:0:5::11]) by smarthost2.sentex.ca (8.15.2/8.15.2) with ESMTPS id v2FDArWR027011 (version=TLSv1 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO) for ; Wed, 15 Mar 2017 09:10:53 -0400 (EDT) (envelope-from mike@sentex.net) Received: from [IPv6:2607:f3e0:0:4:4d20:5672:d219:c811] ([IPv6:2607:f3e0:0:4:4d20:5672:d219:c811]) by lava.sentex.ca (8.15.2/8.15.2) with ESMTP id v2FDApYR068741; Wed, 15 Mar 2017 09:10:52 -0400 (EDT) (envelope-from mike@sentex.net) Subject: Re: pf bug with tun interfaces ? To: Kristof Provost References: <1b605589-9642-ee92-fb9b-9ff5b4798316@sentex.net> Cc: "freebsd-net@freebsd.org" From: Mike Tancsa Organization: Sentex Communications Message-ID: <6582cf37-08b0-9083-0c3e-1396a885d005@sentex.net> Date: Wed, 15 Mar 2017 09:10:51 -0400 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Scanned-By: MIMEDefang 2.78 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Mar 2017 13:10:55 -0000 On 3/15/2017 4:28 AM, Kristof Provost wrote: > I don’t see any obvious reason why that would happen. > > Can you reduce this to a minimal test setup and include rc.conf, pf.conf, … > with a bug report in bugzilla? is it possible that its how OpenVPN sets up the tun interface ? Otherwise nat via pf on ppp connections would not work either. I will try and setup a most simple test vm ---Mike -- ------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, mike@sentex.net Providing Internet services since 1994 www.sentex.net Cambridge, Ontario Canada http://www.tancsa.com/