Page MenuHomeFreeBSD

pf: Fix interface counters for af-to rules
ClosedPublic

Authored by vegeta_tuxpowered.net on Sep 9 2025, 1:23 PM.
Tags
None
Referenced Files
Unknown Object (File)
Jan 29 2026, 12:05 PM
Unknown Object (File)
Jan 27 2026, 10:17 AM
Unknown Object (File)
Jan 23 2026, 8:30 PM
Unknown Object (File)
Jan 22 2026, 11:20 PM
Unknown Object (File)
Jan 14 2026, 12:06 PM
Unknown Object (File)
Jan 6 2026, 2:06 AM
Unknown Object (File)
Dec 27 2025, 10:07 AM
Unknown Object (File)
Dec 21 2025, 5:31 PM

Details

Summary

An inbound af-to rule creates a state bypassing outbound pf_test(). In such
case increase counters of the outbound interface directly in pf_route() for
post-af-to address family.

For outbound af-to rules ensure that post-af-to address family is used to
increase interface counters.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable