Page MenuHomeFreeBSD
Differential D50662

pf: align option handling for IPv4 and IPv6
ClosedPublic
Actions

Authored by kp on Jun 3 2025, 12:49 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Feb 9, 2:19 PM
Unknown Object (File)
Jan 19 2026, 8:07 PM
Unknown Object (File)
Jan 18 2026, 4:38 PM
Unknown Object (File)
Jan 16 2026, 5:19 AM
Unknown Object (File)
Jan 14 2026, 1:11 AM
Unknown Object (File)
Jan 10 2026, 4:28 AM
Unknown Object (File)
Jan 10 2026, 4:28 AM
Unknown Object (File)
Jan 6 2026, 1:05 AM
View All 67 Files
Subscribers
farrokhi
glebius
imp
melifaro
vegeta_tuxpowered.net
ziaee

Details

Reviewers
None
Group Reviewers
pfsense
Commits
rGee97d8918389: pf: align option handling for IPv4 and IPv6
Summary

Block IPv6 packets in pf(4) that have hop-by-hop options header or
destination options header. Such packets can be passed by adding
"allow-opts" to the rule. So IPv6 options are handled like their
counterpart in IPv4 now.
tested by benno@; OK henning@

Obtained from: OpenBSD, bluhm <bluhm@openbsd.org>, c50c83ac27
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

PathSize
share/
man/
man5/
13 lines
sys/
netpfil/
pf/
11 lines

Diff 156615

View Options

share/man/man5/pf.conf.5

Loading...
View Options

sys/netpfil/pf/pf.c

Loading...