[Bug 223208] [pf] pf.conf syntax (:peer) rules load incorrectly

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Tue Oct 24 12:37:33 UTC 2017


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=223208

            Bug ID: 223208
           Summary: [pf] pf.conf syntax (:peer) rules load incorrectly
           Product: Base System
           Version: 11.1-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: felix_mail at mail.ru

Reproduced on amd64:
===================

ifconfig tun0 create
ifconfig tun0 10.0.0.1 10.0.0.2

1.
echo "pass in quick on lo0 route-to (tun0 10.0.0.2) inet" | pfctl -f -
pfctl -sr

pass in quick on lo0 route-to (tun0 10.0.0.2) inet all flags S/SA keep state

2. Problem:
echo "pass in quick on lo0 route-to (tun0 tun0:peer) inet" | pfctl -f -
pfctl -sr

pass in quick on lo0 route-to ( 10.0.0.2) inet all flags S/SA keep state


In second case PF silently drops the packets.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list