Differential D50662

pf: align option handling for IPv4 and IPv6
ClosedPublic
Actions

Authored by kp on Jun 3 2025, 12:49 PM.

Tags

None

Referenced Files

	Unknown Object (File)
	Mon, May 18, 10:33 PM

	Unknown Object (File)
	Sat, May 16, 11:29 PM

	Unknown Object (File)
	Sat, May 16, 9:52 PM

	Unknown Object (File)
	Sat, May 16, 6:40 PM

	Unknown Object (File)
	Thu, May 14, 6:15 PM

	Unknown Object (File)
	Wed, May 13, 11:42 PM

	Unknown Object (File)
	Wed, May 13, 6:23 PM

	Unknown Object (File)
	Wed, May 13, 12:07 AM

View All 84 Files

Subscribers

vegeta_tuxpowered.net

Details

Reviewers

None

Group Reviewers

Commits

rGee97d8918389: pf: align option handling for IPv4 and IPv6

Summary

Block IPv6 packets in pf(4) that have hop-by-hop options header or
destination options header. Such packets can be passed by adding
"allow-opts" to the rule. So IPv6 options are handled like their
counterpart in IPv4 now.
tested by benno@; OK henning@

Obtained from: OpenBSD, bluhm <bluhm@openbsd.org>, c50c83ac27
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

kp created this revision.Jun 3 2025, 12:49 PM

Herald added subscribers: ziaee, vegeta_tuxpowered.net, glebius and 3 others. · View Herald TranscriptJun 3 2025, 12:49 PM

kp requested review of this revision.Jun 3 2025, 12:49 PM

Harbormaster completed remote builds in B64611: Diff 156468.Jun 3 2025, 12:49 PM

kp added a parent revision: D50661: pf tests: skip TestHeader6::test_too_many if ipfilter is loaded.Jun 3 2025, 12:49 PM

kp added a child revision: D50663: pf tests: update after IPv6 hop-by-hop change.

This revision was not accepted when it landed; it landed in state Needs Review.Jun 6 2025, 11:17 AM

Closed by commit rGee97d8918389: pf: align option handling for IPv4 and IPv6 (authored by kp). · Explain Why

This revision was automatically updated to reflect the committed changes.

kp added a commit: rGee97d8918389: pf: align option handling for IPv4 and IPv6.

Revision Contents
Changeset List

Path

Size

share/

man/

man5/

13 lines

sys/

netpfil/

pf/

11 lines

Diff 156615

share/man/man5/pf.conf.5

Loading...

sys/netpfil/pf/pf.c

Loading...