Page MenuHomeFreeBSD

pf: Fix interface counters for af-to rules
ClosedPublic

Authored by vegeta_tuxpowered.net on Sep 9 2025, 1:23 PM.
Tags
None
Referenced Files
F165216910: D52448.id163001.diff
Thu, Aug 6, 9:59 PM
F165216908: D52448.id161786.diff
Thu, Aug 6, 9:59 PM
F165216898: D52448.id.diff
Thu, Aug 6, 9:59 PM
F165216886: D52448.diff
Thu, Aug 6, 9:58 PM
Unknown Object (File)
Fri, Jul 31, 5:21 AM
Unknown Object (File)
Mon, Jul 27, 6:51 AM
Unknown Object (File)
Sun, Jul 26, 4:29 PM
Unknown Object (File)
Sat, Jul 25, 9:23 PM

Details

Summary

An inbound af-to rule creates a state bypassing outbound pf_test(). In such
case increase counters of the outbound interface directly in pf_route() for
post-af-to address family.

For outbound af-to rules ensure that post-af-to address family is used to
increase interface counters.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable