HomeFreeBSD

pf: ensure we have the correct source/destination IP address in ICMP errors

Description

pf: ensure we have the correct source/destination IP address in ICMP errors

When we route-to a packet that later turns out to not fit in the
outbound interface MTU we generate an ICMP error.
However, if we've already changed those (i.e. we've passed through a NAT
rule) we have to undo the transformation first.

Obtained from: pfSense
MFC after: 3 weeks
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D32571

(cherry picked from commit ab238f14544b2415561c4fed674ee360aa8b5860)

Details

Provenance
loosAuthored on Oct 19 2021, 11:37 AM
kpCommitted on Nov 13 2021, 11:15 PM
Differential Revision
D32571: pf: ensure we have the correct source/destination IP address in ICMP errors
Parents
R10:08f5721e4c10: Add some of Intel Alder Lake device IDs.
Branches
Unknown
Tags
Unknown