Scrub reassemble tcp
Evaldas Auryla <[email protected]> Thu, 13 Nov 2014 18:13:15 +0100
| Newsgroups | gmane.os.openbsd.pf |
|---|---|
| Message-ID | <[email protected]> |
Hi all, Is anyone using "reassemble tcp" with scrub ? Been using this for years without problems, now all of a sudden having trouble with SMTP echange with someone, here is the definition I use, on OpenBSD 5.4: match in all scrub (no-df max-mss 1440 random-id reassemble tcp) If I telnet port 25 to the other side, I can see sendmail's greeting, but as soon as I go with "EHLO me.dot.com", no more response, it hangs, and I see PF sending "icmp host unreachable" to the other side. And if I remove "reassemble tcp" all goes fine. I talked to the guys on the other side, their firewall is netasq, and they don't see anything unusual. Thanks,