Page MenuHomeFreeBSD
Differential D51797

[pfil loop prevention experiment 1/5] pf tests: Add tests for syncookies and synproxy with route-to
AcceptedPublic
Actions

Authored by vegeta_tuxpowered.net on Aug 7 2025, 4:44 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Apr 10, 5:03 AM
Unknown Object (File)
Sun, Apr 5, 4:54 AM
Unknown Object (File)
Sat, Apr 4, 5:45 AM
Unknown Object (File)
Tue, Mar 24, 6:56 PM
Unknown Object (File)
Mar 13 2026, 4:16 PM
Unknown Object (File)
Mar 13 2026, 1:21 AM
Unknown Object (File)
Mar 4 2026, 8:10 AM
Unknown Object (File)
Jan 13 2026, 7:07 AM
View All 32 Files
Subscribers
farrokhi
glebius
imp
kp
melifaro

Details

Reviewers
kp
Summary

Syncookies and synproxy don't work with route-to. Add tests to confirm it and eventually fix it.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

vegeta_tuxpowered.net created this revision.Aug 7 2025, 4:44 PM
Herald added subscribers: glebius, melifaro, farrokhi, imp. · View Herald TranscriptAug 7 2025, 4:44 PM
vegeta_tuxpowered.net requested review of this revision.Aug 7 2025, 4:44 PM
vegeta_tuxpowered.net retitled this revision from pfil loop prevention experiment ; pf tests: Add tests for syncookies and synproxy with route-to to [pfil loop prevention experiment 1/5] pf tests: Add tests for syncookies and synproxy with route-to.
kp accepted this revision.Aug 8 2025, 9:01 AM
kp added a subscriber: kp.

Tests look good, but of course only commit them once the fix lands too.

This revision is now accepted and ready to land.Aug 8 2025, 9:01 AM
kp added a child revision: D51798: [pfil loop prevention experiment 2/5] pf tests: Add test for dummynet in pre- and post-routing scenario.Aug 8 2025, 9:34 AM

Revision Contents
Changeset List

PathSize
tests/
sys/
netpfil/
pf/
63 lines
61 lines
14 lines

Diff 159975

View Options

tests/sys/netpfil/pf/syncookie.sh

Loading...
View Options

tests/sys/netpfil/pf/synproxy.sh

Loading...
View Options

tests/sys/netpfil/pf/utils.subr

Loading...