Page MenuHomeFreeBSD

pf: Rationalize the ip_divert_ptr test
ClosedPublic

Authored by markj on Jan 23 2026, 8:55 PM.
Tags
None
Referenced Files
F147288562: D54845.diff
Mon, Mar 9, 5:26 PM
F147215019: D54845.diff
Mon, Mar 9, 4:42 AM
F147205230: D54845.id170289.diff
Mon, Mar 9, 2:50 AM
Unknown Object (File)
Sat, Feb 28, 1:39 PM
Unknown Object (File)
Fri, Feb 20, 5:09 PM
Unknown Object (File)
Fri, Feb 20, 5:23 AM
Unknown Object (File)
Thu, Feb 19, 12:25 PM
Unknown Object (File)
Sun, Feb 8, 3:09 AM

Details

Summary

If a rule has a divert port set, then we can reasonably predict that
ipdivert.ko is loaded, and in particular that ip_divert_ptr is set.

Moreover, in this case, if ipdivert.ko is not loaded we should just drop
the packet instead of ignoring the divert rule.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable