pf: always drop ICMPv6 in IPv4 datagrams
ClosedPublic
Actions

Authored by kp on Sep 7 2024, 9:33 AM.

Tags

None

Referenced Files

	F110401884: D46575.diff
	Mon, Feb 17, 10:19 PM

	Unknown Object (File)
	Sun, Jan 26, 3:12 AM

	Unknown Object (File)
	Thu, Jan 23, 6:33 PM

	Unknown Object (File)
	Jan 12 2025, 4:24 AM

	Unknown Object (File)
	Jan 12 2025, 4:04 AM

	Unknown Object (File)
	Jan 3 2025, 5:00 PM

	Unknown Object (File)
	Jan 2 2025, 4:50 AM

	Unknown Object (File)
	Dec 11 2024, 5:01 AM

Subscribers

vegeta_tuxpowered.net

zlei

Details

Reviewers

zlei

Group Reviewers

network
pfsense

Commits

rG2ca286d0d260: pf: always drop ICMPv6 in IPv4 datagrams

Summary

Not only when compiled with INET6.

Suggested by Max Laier.
ok henning@

Obtained from: OpenBSD, jsing <jsing@openbsd.org>, 0ba1e6e32b9
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Skipped

Unit

Tests Skipped

Build Status

Buildable 59363
Build 56250: arc lint + arc unit

Event Timeline

kp created this revision.Sep 7 2024, 9:33 AM

Herald added subscribers: vegeta_tuxpowered.net, glebius, melifaro and 2 others. · View Herald TranscriptSep 7 2024, 9:33 AM

kp requested review of this revision.Sep 7 2024, 9:33 AM

kp added a parent revision: D46574: pf: fix debug printf.

Harbormaster completed remote builds in B59363: Diff 143071.Sep 7 2024, 9:33 AM

kp added a child revision: D46576: pf: use AF_INET6 when comparing IPv6 addresses.Sep 7 2024, 9:33 AM

Reasonable!

This revision is now accepted and ready to land.Sep 14 2024, 7:23 AM

Closed by commit rG2ca286d0d260: pf: always drop ICMPv6 in IPv4 datagrams (authored by kp). · Explain WhySep 16 2024, 1:05 PM

This revision was automatically updated to reflect the committed changes.

kp added a commit: rG2ca286d0d260: pf: always drop ICMPv6 in IPv4 datagrams.

Revision Contents
Changeset List

Path

Size

sys/

netpfil/

pf/

pf.c

2 lines

Diff 143071

View Options

pf: always drop ICMPv6 in IPv4 datagramsClosedPublicActions