Page MenuHomeFreeBSD
Differential D50662

pf: align option handling for IPv4 and IPv6
ClosedPublic
Actions

Authored by kp on Jun 3 2025, 12:49 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Oct 13, 6:54 AM
Unknown Object (File)
Sun, Oct 11, 6:40 AM
Unknown Object (File)
Tue, Oct 6, 5:55 PM
Unknown Object (File)
Tue, Oct 6, 12:54 AM
Unknown Object (File)
Mon, Oct 5, 6:20 AM
Unknown Object (File)
Sun, Oct 4, 2:39 PM
Unknown Object (File)
Sat, Oct 3, 9:21 PM
Unknown Object (File)
Aug 22 2026, 10:41 PM
View All Files
Subscribers
farrokhi
glebius
imp
melifaro
vegeta_tuxpowered.net
ziaee

Details

Reviewers
None
Group Reviewers
pfsense
Commits
rGee97d8918389: pf: align option handling for IPv4 and IPv6
Summary

Block IPv6 packets in pf(4) that have hop-by-hop options header or
destination options header. Such packets can be passed by adding
"allow-opts" to the rule. So IPv6 options are handled like their
counterpart in IPv4 now.
tested by benno@; OK henning@

Obtained from: OpenBSD, bluhm <bluhm@openbsd.org>, c50c83ac27
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

PathSize
share/
man/
man5/
13 lines
sys/
netpfil/
pf/
11 lines

Diff 156615

View Options

share/man/man5/pf.conf.5

Loading...
View Options

sys/netpfil/pf/pf.c

Loading...