Page MenuHomeFreeBSD
Differential D32571

pf: ensure we have the correct source/destination IP address in ICMP errors
ClosedPublic
Actions

Authored by kp on Oct 20 2021, 8:12 AM.
Tags
None
Referenced Files
F137016515: D32571.id97276.diff
Thu, Nov 20, 11:59 PM
F137016448: D32571.id97156.diff
Thu, Nov 20, 11:59 PM
F137016209: D32571.id.diff
Thu, Nov 20, 11:58 PM
F137014650: D32571.diff
Thu, Nov 20, 11:54 PM
Unknown Object (File)
Tue, Nov 18, 11:44 AM
Unknown Object (File)
Sun, Nov 16, 4:41 AM
Unknown Object (File)
Sat, Nov 15, 9:41 PM
Unknown Object (File)
Sat, Nov 15, 9:37 PM
View All Files
Subscribers
farrokhi
imp
melifaro

Details

Reviewers
None
Group Reviewers
network
pfsense
Commits
rG59264e60e1e9: pf: ensure we have the correct source/destination IP address in ICMP errors
rGa50876f0ac7a: pf: ensure we have the correct source/destination IP address in ICMP errors
rGab238f14544b: pf: ensure we have the correct source/destination IP address in ICMP errors
Summary

When we route-to a packet that later turns out to not fit in the
outbound interface MTU we generate an ICMP error.
However, if we've already changed those (i.e. we've passed through a NAT
rule) we have to undo the transformation first.

Obtained from: pfSense
MFC after: 3 weeks
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

PathSize
sys/
netpfil/
pf/
103 lines

Diff 97276

View Options

sys/netpfil/pf/pf.c

Loading...