Page MenuHomeFreeBSD

pf: ensure we have the correct source/destination IP address in ICMP errors
ClosedPublic

Authored by kp on Oct 20 2021, 8:12 AM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Mar 5, 8:54 AM
Unknown Object (File)
Feb 27 2024, 6:15 AM
Unknown Object (File)
Jan 30 2024, 5:01 AM
Unknown Object (File)
Jan 13 2024, 9:37 PM
Unknown Object (File)
Dec 20 2023, 7:49 AM
Unknown Object (File)
Dec 15 2023, 8:48 AM
Unknown Object (File)
Dec 8 2023, 9:47 AM
Unknown Object (File)
Dec 8 2023, 4:46 AM

Details

Summary

When we route-to a packet that later turns out to not fit in the
outbound interface MTU we generate an ICMP error.
However, if we've already changed those (i.e. we've passed through a NAT
rule) we have to undo the transformation first.

Obtained from: pfSense
MFC after: 3 weeks
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable