pf tests: ensure we don't NAT to link-local addresses
ClosedPublic
Actions

Authored by kp on Sep 7 2024, 9:37 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Sat, Oct 11, 2:36 AM

	Unknown Object (File)
	Fri, Oct 10, 1:05 AM

	Unknown Object (File)
	Sat, Sep 27, 6:59 AM

	Unknown Object (File)
	Sep 12 2025, 8:58 AM

	Unknown Object (File)
	Aug 23 2025, 5:14 PM

	Unknown Object (File)
	Aug 22 2025, 6:24 AM

	Unknown Object (File)
	Aug 15 2025, 11:49 PM

	Unknown Object (File)
	Aug 15 2025, 2:04 PM

Subscribers

vegeta_tuxpowered.net

zlei

Details

Reviewers

zlei

Group Reviewers

network
pfsense

Commits

rG9746c1e28877: pf tests: ensure we don't NAT to link-local addresses

Summary

Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

kp created this revision.Sep 7 2024, 9:37 AM

Herald added subscribers: vegeta_tuxpowered.net, glebius, melifaro and 2 others. · View Herald TranscriptSep 7 2024, 9:37 AM

kp requested review of this revision.Sep 7 2024, 9:37 AM

Harbormaster completed remote builds in B59383: Diff 143091.Sep 7 2024, 9:37 AM

kp added a parent revision: D46594: pf: exclude link local address from the dynamic interface address pool.Sep 7 2024, 9:37 AM

kp added a child revision: D46596: pf: do not pass af to PFLOG_PACKET.

Looks good to me.

tests/sys/netpfil/pf/nat.sh
253	I'd prefer what we want, but not what we prevent.
256	Nits.

This revision is now accepted and ready to land.Sep 14 2024, 8:16 AM

guest-patmaddox added a subscriber: guest-patmaddox.Sep 19 2024, 5:09 PM

Closed by commit rG9746c1e28877: pf tests: ensure we don't NAT to link-local addresses (authored by kp). · Explain WhySep 19 2024, 8:22 PM

This revision was automatically updated to reflect the committed changes.

kp added a commit: rG9746c1e28877: pf tests: ensure we don't NAT to link-local addresses.

Revision Contents
Changeset List

Path

Size

tests/

sys/

netpfil/

pf/

nat.sh

52 lines

Diff 143492

View Options

tests/sys/netpfil/pf/nat.sh

pf tests: ensure we don't NAT to link-local addressesClosedPublicActions