pf tests: ensure we don't NAT to link-local addresses
ClosedPublic
Actions

Authored by kp on Sep 7 2024, 9:37 AM.

Tags

None

Referenced Files

	F174539843: D46595.id143492.diff
	Sun, Oct 4, 1:02 AM

	F174472575: D46595.id143091.diff
	Sat, Oct 3, 12:49 PM

	F174466425: D46595.id143492.diff
	Sat, Oct 3, 11:40 AM

	Unknown Object (File)
	Sun, Sep 20, 6:33 PM

	Unknown Object (File)
	Sun, Sep 20, 5:41 PM

	Unknown Object (File)
	Sun, Sep 20, 4:28 PM

	Unknown Object (File)
	Sun, Sep 20, 8:26 AM

	Unknown Object (File)
	Tue, Sep 8, 4:21 PM

Subscribers

vegeta_tuxpowered.net

zlei

Details

Reviewers

zlei

Group Reviewers

network
pfsense

Commits

rG9746c1e28877: pf tests: ensure we don't NAT to link-local addresses

Summary

Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

kp created this revision.Sep 7 2024, 9:37 AM

Herald added subscribers: vegeta_tuxpowered.net, glebius, melifaro and 2 others. · View Herald TranscriptSep 7 2024, 9:37 AM

kp requested review of this revision.Sep 7 2024, 9:37 AM

Harbormaster completed remote builds in B59383: Diff 143091.Sep 7 2024, 9:37 AM

kp added a parent revision: D46594: pf: exclude link local address from the dynamic interface address pool.Sep 7 2024, 9:37 AM

kp added a child revision: D46596: pf: do not pass af to PFLOG_PACKET.

Looks good to me.

tests/sys/netpfil/pf/nat.sh
253	I'd prefer what we want, but not what we prevent.
256	Nits.

This revision is now accepted and ready to land.Sep 14 2024, 8:16 AM

patmaddox added a subscriber: patmaddox.Sep 19 2024, 5:09 PM

Closed by commit rG9746c1e28877: pf tests: ensure we don't NAT to link-local addresses (authored by kp). · Explain WhySep 19 2024, 8:22 PM

This revision was automatically updated to reflect the committed changes.

kp added a commit: rG9746c1e28877: pf tests: ensure we don't NAT to link-local addresses.

Revision Contents
Changeset List

Path

Size

tests/

sys/

netpfil/

pf/

nat.sh

52 lines

Diff 143492

View Options

tests/sys/netpfil/pf/nat.sh

pf tests: ensure we don't NAT to link-local addressesClosedPublicActions