Re: pf return-rst w/ TTL configurable (per rule)

[Philipp Buehler <lists_(_at_)_fips_(_dot_)_de>]

On 07/06/2002, Philipp Buehler <philipp_(_at_)_buehler_(_dot_)_de> wrote To tech_(_at_)_openbsd_(_dot_)_org:
> Comments?

IPv6:

--- pf.c.orig2  Fri Jun  7 06:01:44 2002
+++ pf.c        Fri Jun  7 06:07:27 2002
@@ -2855,7 +2855,9 @@
                    sizeof(struct ip6_hdr), sizeof(*th));
 
                h2_6->ip6_vfc |= IPV6_VERSION;
-               h2_6->ip6_hlim = 128;
+               if (!return_ttl)
+                       return_ttl = IPV6_DEFHLIM;
+               h2_6->ip6_hlim = return_ttl;
 
                ip6_output(m, NULL, NULL, 0, NULL, NULL);
 #endif /* INET6 */


IPV6_DEFHLIM is 64, not 128.

Which should be used?

ciao
-- 
Philipp Buehler, aka fips | sysfive.com GmbH | BOfH | NUCH | <double-p> 

#1: Break the clue barrier!
#2: Already had buzzword confuseritis ?