[Bug 219803] [patch] PF: implement RFC 4787 REQ 1 and 3 (full cone NAT)

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219803

Kristof Provost <kp at freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kp at freebsd.org

--- Comment #1 from Kristof Provost <kp at freebsd.org> ---
Can you go into a bit more detail of what problem you're trying to solve with
this patch, in its current state?

I think I can see the use case for the extended patch (where you allow packets
from any Z:z back to X:x), but I'd certainly object to that, as it's a
significant behaviour change. It removes the accidental stateful firewall
aspect of the NAT implementation.

-- 
You are receiving this mail because:
You are the assignee for the bug.