pf tests: ensure we don't NAT to link-local addresses
ClosedPublic
Actions

Authored by kp on Sep 7 2024, 9:37 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Mon, Oct 27, 5:38 AM

	Unknown Object (File)
	Sat, Oct 25, 1:20 AM

	Unknown Object (File)
	Fri, Oct 24, 3:56 AM

	Unknown Object (File)
	Fri, Oct 24, 3:56 AM

	Unknown Object (File)
	Fri, Oct 24, 3:56 AM

	Unknown Object (File)
	Fri, Oct 24, 3:39 AM

	Unknown Object (File)
	Oct 11 2025, 2:36 AM

	Unknown Object (File)
	Oct 10 2025, 1:05 AM

Subscribers

vegeta_tuxpowered.net

zlei

Details

Reviewers

zlei

Group Reviewers

network
pfsense

Commits

rG9746c1e28877: pf tests: ensure we don't NAT to link-local addresses

Summary

Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

kp created this revision.Sep 7 2024, 9:37 AM

Herald added subscribers: vegeta_tuxpowered.net, glebius, melifaro and 2 others. · View Herald TranscriptSep 7 2024, 9:37 AM

kp requested review of this revision.Sep 7 2024, 9:37 AM

Harbormaster completed remote builds in B59383: Diff 143091.Sep 7 2024, 9:37 AM

kp added a parent revision: D46594: pf: exclude link local address from the dynamic interface address pool.Sep 7 2024, 9:37 AM

kp added a child revision: D46596: pf: do not pass af to PFLOG_PACKET.

Looks good to me.

tests/sys/netpfil/pf/nat.sh
253	I'd prefer what we want, but not what we prevent.
256	Nits.

This revision is now accepted and ready to land.Sep 14 2024, 8:16 AM

guest-patmaddox added a subscriber: guest-patmaddox.Sep 19 2024, 5:09 PM

Closed by commit rG9746c1e28877: pf tests: ensure we don't NAT to link-local addresses (authored by kp). · Explain WhySep 19 2024, 8:22 PM

This revision was automatically updated to reflect the committed changes.

kp added a commit: rG9746c1e28877: pf tests: ensure we don't NAT to link-local addresses.

Revision Contents
Changeset List

Path

Size

tests/

sys/

netpfil/

pf/

nat.sh

52 lines

Diff 143492

View Options

tests/sys/netpfil/pf/nat.sh

pf tests: ensure we don't NAT to link-local addressesClosedPublicActions