[Bug 268717] [pf] rdr rules don't work for traffic originating at localhost

Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: <bugzilla-noreply_at_freebsd.org>
Date: Fri, 27 Jan 2023 15:38:49 UTC

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=268717

--- Comment #19 from dfr@rabson.org ---
Testing with ipfirewall's ipnat module shows the exact same pattern where the
rule matches the initial connection attempt and translates the destination
address and port but the reply does not reverse the translation.

Adding a call to pfil_mbuf_out() in ip_input() right before the packet is
handed off to upper-layer protocols fixes the problem for both pf and ipnat.

-- 
You are receiving this mail because:
You are the assignee for the bug.