Page MenuHomeFreeBSD

pf: fix synproxy to local
ClosedPublic

Authored by kp on Sep 6 2021, 8:05 AM.
Tags
None
Referenced Files
F166622829: D31853.diff
Fri, Aug 14, 10:54 PM
F166597997: D31853.id94950.diff
Fri, Aug 14, 7:36 PM
Unknown Object (File)
Thu, Aug 13, 12:14 PM
Unknown Object (File)
Tue, Aug 11, 11:57 PM
Unknown Object (File)
Tue, Aug 11, 10:47 PM
Unknown Object (File)
Tue, Aug 11, 9:36 PM
Unknown Object (File)
Tue, Aug 11, 2:49 PM
Unknown Object (File)
Mon, Aug 10, 12:06 PM

Details

Summary

When we're synproxy-ing a connection that's going to us (as opposed to a
forwarded one) we wound up trying to send out the pf-generated tcp
packets through pf_intr(), which called ip(6)_output(). That doesn't
work all that well for packets that are destined for us, so in that case
we must call ip(6)_input() instead.

MFC after: 1 week
Sponsored by: Modirum MDPay

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable