On Tue, 08 Feb 2005 09:17:06 +0200, Martti Kuparinen wrote:

> Hi!
> 
> I have just upgraded IPFilter to the latest version (4.1.5) on

Looking at the diffs, this backs out the revision 1.6 of
src/sys/dist/ipf/netinet/fil.c and replaces it with a fix that Darren Reed
proposed in PR#26839, and which is known to break IPv4 traceroute.

Could you please test if with a single rule like

pass in on <if> all keep state

on a router, traceroute from a host connected to <if> to a host on the
other side of a router stops working or not with this update?
Unfortunately, I don't run -current.

Bye	Pavel