[Bug 214613] Reloading pf rules breaks connections on lo0

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Wed May 2 22:36:43 UTC 2018


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=214613

--- Comment #3 from commit-hook at freebsd.org ---
A commit references this bug:

Author: kp
Date: Wed May  2 22:36:11 UTC 2018
New revision: 333187
URL: https://svnweb.freebsd.org/changeset/base/333187

Log:
  MFC r333084:

  pfctl: Don't break connections on skipped interfaces on reload

  On reload we used to first flush everything, including the list of skipped
  interfaces.  This can lead to termination of these connections if they send
  packets before the new configuration is applied.

  Note that this doesn't currently happen on 12 or 11, because of special
EACCES
  handling introduced in r315514. This special behaviour in tcp_output() may
  change, hence the fix in pfctl.

  PR:           214613
  Submitted by: Andreas Longwitz <longwitz at incore.de>

Changes:
_U  stable/10/
  stable/10/sbin/pfctl/pfctl.c

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-pf mailing list