Page MenuHomeFreeBSD

pf: allow filtering on the receive interface
ClosedPublic

Authored by kp on Sep 7 2024, 9:34 AM.
Tags
None
Referenced Files
F174781754: D46577.id143385.diff
Mon, Oct 5, 11:18 PM
F174781743: D46577.id143385.diff
Mon, Oct 5, 11:18 PM
Unknown Object (File)
Mon, Oct 5, 1:17 AM
Unknown Object (File)
Sat, Oct 3, 8:59 PM
Unknown Object (File)
Sat, Oct 3, 12:56 PM
Unknown Object (File)
Fri, Oct 2, 3:23 PM
Unknown Object (File)
Mon, Sep 21, 12:10 AM
Unknown Object (File)
Sat, Sep 19, 1:45 PM

Details

Summary

add support to pf for filtering a packet by the interface it was received
on. use the received-on IFNAME filter option on a pf.conf rule to restrict
which packet the interface had to be received on. eg:

pass out on em0 from $foo to $bar received-on fxp0

ive been running this in production for a week now. i find it particularly
usefull with interface groups.

no objections, and a few "i like"s from henning, claudio, deraadt, mpf

Obtained from: OpenBSD, dlg <dlg@openbsd.org>, 95b4320893
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable