Page MenuHomeFreeBSD

ipfw: forbid add keep-state rules that depend from tablearg
ClosedPublic

Authored by ae on Jul 22 2025, 8:03 AM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Oct 12, 12:24 PM
Unknown Object (File)
Sun, Oct 12, 12:24 PM
Unknown Object (File)
Sun, Oct 12, 12:24 PM
Unknown Object (File)
Sun, Oct 12, 1:26 AM
Unknown Object (File)
Sun, Oct 5, 3:49 AM
Unknown Object (File)
Fri, Oct 3, 12:07 PM
Unknown Object (File)
Tue, Sep 30, 11:56 PM
Unknown Object (File)
Fri, Sep 26, 2:31 PM

Details

Summary

tablearg is determined after making table lookup. When we applying
rule action that uses dynamic state, such lookup was not done and
thus action can not determine what table and what value should be used.
Instead we check such rules when they are added and return error.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

ae held this revision as a draft.
ae published this revision for review.Jul 22 2025, 8:04 AM
ae added reviewers: glebius, melifaro, zlei.
ae retitled this revision from ipfw: forbid add keep-state rules that depends from tablearg to ipfw: forbid add keep-state rules that depend from tablearg.
This revision was not accepted when it landed; it landed in state Needs Review.Aug 3 2025, 9:53 AM
This revision was automatically updated to reflect the committed changes.