Page MenuHomeFreeBSD
Differential D50662

pf: align option handling for IPv4 and IPv6
ClosedPublic
Actions

Authored by kp on Jun 3 2025, 12:49 PM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Jul 30, 1:42 PM
Unknown Object (File)
Wed, Jul 29, 8:49 AM
Unknown Object (File)
Tue, Jul 28, 3:34 PM
Unknown Object (File)
Mon, Jul 27, 11:53 AM
Unknown Object (File)
Mon, Jul 27, 5:58 AM
Unknown Object (File)
Sun, Jul 26, 6:37 AM
Unknown Object (File)
Sun, Jul 19, 11:49 PM
Unknown Object (File)
Sat, Jul 18, 5:16 PM
View All 96 Files
Subscribers
farrokhi
glebius
imp
melifaro
vegeta_tuxpowered.net
ziaee

Details

Reviewers
None
Group Reviewers
pfsense
Commits
rGee97d8918389: pf: align option handling for IPv4 and IPv6
Summary

Block IPv6 packets in pf(4) that have hop-by-hop options header or
destination options header. Such packets can be passed by adding
"allow-opts" to the rule. So IPv6 options are handled like their
counterpart in IPv4 now.
tested by benno@; OK henning@

Obtained from: OpenBSD, bluhm <bluhm@openbsd.org>, c50c83ac27
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

PathSize
share/
man/
man5/
13 lines
sys/
netpfil/
pf/
11 lines

Diff 156615

View Options

share/man/man5/pf.conf.5

Loading...
View Options

sys/netpfil/pf/pf.c

Loading...