git: 3baef738a8ae - main - pf tests: update after IPv6 hop-by-hop change

Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: Kristof Provost <kp_at_FreeBSD.org>
Date: Fri, 06 Jun 2025 11:17:16 UTC

The branch main has been updated by kp:

URL: https://cgit.FreeBSD.org/src/commit/?id=3baef738a8ae58c7286f499ef1cd8a50f2435777

commit 3baef738a8ae58c7286f499ef1cd8a50f2435777
Author:     Kristof Provost <kp@FreeBSD.org>
AuthorDate: 2025-05-27 15:22:20 +0000
Commit:     Kristof Provost <kp@FreeBSD.org>
CommitDate: 2025-06-06 11:16:00 +0000

    pf tests: update after IPv6 hop-by-hop change
    
    Hop-by-hop headers on IPv6 are now blocked by default. Specify 'allow-opts' to
    allow them.
    
    Sponsored by:   Rubicon Communications, LLC ("Netgate")
    Differential Revision:  https://reviews.freebsd.org/D50663
---
 tests/sys/netpfil/pf/frag6.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/sys/netpfil/pf/frag6.py b/tests/sys/netpfil/pf/frag6.py
index 0ed980f96fdd..c8b756f8274b 100644
--- a/tests/sys/netpfil/pf/frag6.py
+++ b/tests/sys/netpfil/pf/frag6.py
@@ -101,7 +101,7 @@ class TestFrag6HopHyHop(VnetTestTemplate):
         ToolsHelper.print_output("/sbin/pfctl -x loud")
         ToolsHelper.pf_rules([
             "scrub fragment reassemble min-ttl 10",
-            "pass",
+            "pass allow-opts",
         ])
 
     @pytest.mark.require_user("root")