Page MenuHomeFreeBSD
Differential D51797

[pfil loop prevention experiment 1/5] pf tests: Add tests for syncookies and synproxy with route-to
AcceptedPublic
Actions

Authored by vegeta_tuxpowered.net on Aug 7 2025, 4:44 PM.
Tags
None
Referenced Files
F156549621: D51797.id.diff
Thu, May 14, 2:47 PM
Unknown Object (File)
Wed, May 13, 5:34 PM
Unknown Object (File)
Mon, May 11, 4:57 AM
Unknown Object (File)
Sun, May 10, 10:10 AM
Unknown Object (File)
Sun, May 10, 10:06 AM
Unknown Object (File)
Tue, Apr 28, 10:56 AM
Unknown Object (File)
Thu, Apr 23, 4:42 AM
Unknown Object (File)
Mon, Apr 20, 5:40 PM
View All 41 Files
Subscribers
farrokhi
glebius
imp
kp
melifaro

Details

Reviewers
kp
Summary

Syncookies and synproxy don't work with route-to. Add tests to confirm it and eventually fix it.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

vegeta_tuxpowered.net created this revision.Aug 7 2025, 4:44 PM
Herald added subscribers: glebius, melifaro, farrokhi, imp. · View Herald TranscriptAug 7 2025, 4:44 PM
vegeta_tuxpowered.net requested review of this revision.Aug 7 2025, 4:44 PM
vegeta_tuxpowered.net retitled this revision from pfil loop prevention experiment ; pf tests: Add tests for syncookies and synproxy with route-to to [pfil loop prevention experiment 1/5] pf tests: Add tests for syncookies and synproxy with route-to.
kp accepted this revision.Aug 8 2025, 9:01 AM
kp added a subscriber: kp.

Tests look good, but of course only commit them once the fix lands too.

This revision is now accepted and ready to land.Aug 8 2025, 9:01 AM
kp added a child revision: D51798: [pfil loop prevention experiment 2/5] pf tests: Add test for dummynet in pre- and post-routing scenario.Aug 8 2025, 9:34 AM

Revision Contents
Changeset List

PathSize
tests/
sys/
netpfil/
pf/
63 lines
61 lines
14 lines

Diff 159975

View Options

tests/sys/netpfil/pf/syncookie.sh

Loading...
View Options

tests/sys/netpfil/pf/synproxy.sh

Loading...
View Options

tests/sys/netpfil/pf/utils.subr

Loading...