PR kern/93849 IP checksum broken by pf no-df over bridge

[Adam McDougall]

On Sat, Mar 04, 2006 at 03:51:33PM +0100, Pieter de Boer wrote:

  Adam McDougall wrote:
  
  >Could someone possibly take a look at this and let me know if it
  >looks 'broken' or if I might be doing something wrong?  I am in 
  >a crunch to choose a firewall solution within a few weeks and it
  >would help me to know if this issue can be solved.  FreeBSD/pf
  >seemed an appropriate solution so far, especially since it has 
  >CARP, pfsync, (and altq which im not using (yet?)).
  You could try compiling pf using CFLAGS=-O instead of -O2. This fixed a 
  checksum problem I had. That probably was an entirely different issue, 
  but perhaps it does help..
  
  -- 
  Pieter
  

I tried that a few days ago when I saw mention of it for sparc64, 
but that did not help.  The patch fixed it though.