Re: Scrub reassemble tcp

Evaldas Auryla <[email protected]> Fri, 21 Nov 2014 17:35:41 +0100
Newsgroups gmane.os.openbsd.pf
Message-ID <[email protected]>
On 2014-11-14 14:54, Henning Brauer wrote:
>> Is anyone using "reassemble tcp" with scrub ? Been using this for years
>> without problems,
> you just didn't notice the problems or didn't hit them. Reassemble tcp
> isn't 100%, unfortunately, and never was. No changes in ages either.
Well, nobody raised a hand, so let's say I didn't notice.
> hitting it more often now isn't too surprising given the increasing use
> of windows scaling etc.
>
I see, so would you recommend to not use it ? As a workaround I tried 
declaring second "scrub" line targeting this specific system with "to 
IP.." syntax, and pf accepted it, but then it seems to be ignored.

Thanks!