[Bug 259183] pf_route drops packets for traffic not matching a rule
Date: Fri, 15 Oct 2021 11:17:07 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=259183
Bug ID: 259183
Summary: pf_route drops packets for traffic not matching a rule
Product: Base System
Version: 13.0-STABLE
Hardware: Any
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: kern
Assignee: bugs@FreeBSD.org
Reporter: vegeta@tuxpowered.net
Created attachment 228719
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=228719&action=edit
Don't drop packets when redirection information comes from a state
For some traffic there might be no matching rule in the current ruleset, for
example when a state was imported via pfsync from a sytem with a different
ruleset checksum. In this case pf_route uses s->rt_addr for routing target
instead of r->rpool.cur but r->rpool is checked anyway, resulting in dropped
packets.
If the patch gets accepted, please add the usual footer to commit:
Submitted by: Kajetan Staszkiewicz <vegeta tuxpowered.net>
Sponsored by: InnoGames GmbH
--
You are receiving this mail because:
You are the assignee for the bug.