Page MenuHomeFreeBSD
Differential D51797

[pfil loop prevention experiment 1/5] pf tests: Add tests for syncookies and synproxy with route-to
AcceptedPublic
Actions

Authored by vegeta_tuxpowered.net on Aug 7 2025, 4:44 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Aug 10, 3:18 PM
Unknown Object (File)
Sun, Aug 9, 5:09 AM
Unknown Object (File)
Sat, Aug 8, 9:32 AM
Unknown Object (File)
Sat, Aug 8, 4:22 AM
Unknown Object (File)
Thu, Aug 6, 10:06 PM
Unknown Object (File)
Thu, Aug 6, 10:06 PM
Unknown Object (File)
Thu, Aug 6, 10:06 PM
Unknown Object (File)
Fri, Jul 31, 5:43 AM
View All 65 Files
Subscribers
farrokhi
glebius
imp
kp
melifaro

Details

Reviewers
kp
Summary

Syncookies and synproxy don't work with route-to. Add tests to confirm it and eventually fix it.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

vegeta_tuxpowered.net created this revision.Aug 7 2025, 4:44 PM
Herald added subscribers: glebius, melifaro, farrokhi, imp. · View Herald TranscriptAug 7 2025, 4:44 PM
vegeta_tuxpowered.net requested review of this revision.Aug 7 2025, 4:44 PM
vegeta_tuxpowered.net retitled this revision from pfil loop prevention experiment ; pf tests: Add tests for syncookies and synproxy with route-to to [pfil loop prevention experiment 1/5] pf tests: Add tests for syncookies and synproxy with route-to.
kp accepted this revision.Aug 8 2025, 9:01 AM
kp added a subscriber: kp.

Tests look good, but of course only commit them once the fix lands too.

This revision is now accepted and ready to land.Aug 8 2025, 9:01 AM
kp added a child revision: D51798: [pfil loop prevention experiment 2/5] pf tests: Add test for dummynet in pre- and post-routing scenario.Aug 8 2025, 9:34 AM

Revision Contents
Changeset List

PathSize
tests/
sys/
netpfil/
pf/
63 lines
61 lines
14 lines

Diff 159975

View Options

tests/sys/netpfil/pf/syncookie.sh

Loading...
View Options

tests/sys/netpfil/pf/synproxy.sh

Loading...
View Options

tests/sys/netpfil/pf/utils.subr

Loading...