pf tests: ensure we don't NAT to link-local addresses
ClosedPublic
Actions

Authored by kp on Sep 7 2024, 9:37 AM.

Tags

None

Referenced Files

	F164023474: D46595.diff
	Tue, Jul 28, 12:38 AM

	F164023469: D46595.diff
	Tue, Jul 28, 12:38 AM

	Unknown Object (File)
	Wed, Jul 22, 9:04 AM

	Unknown Object (File)
	Tue, Jul 21, 6:08 AM

	Unknown Object (File)
	Sun, Jul 19, 8:58 PM

	Unknown Object (File)
	Sat, Jul 11, 9:26 AM

	Unknown Object (File)
	Jun 25 2026, 3:39 AM

	Unknown Object (File)
	Jun 15 2026, 3:53 PM

Subscribers

vegeta_tuxpowered.net

zlei

Details

Reviewers

zlei

Group Reviewers

network
pfsense

Commits

rG9746c1e28877: pf tests: ensure we don't NAT to link-local addresses

Summary

Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

kp created this revision.Sep 7 2024, 9:37 AM

Herald added subscribers: vegeta_tuxpowered.net, glebius, melifaro and 2 others. · View Herald TranscriptSep 7 2024, 9:37 AM

kp requested review of this revision.Sep 7 2024, 9:37 AM

Harbormaster completed remote builds in B59383: Diff 143091.Sep 7 2024, 9:37 AM

kp added a parent revision: D46594: pf: exclude link local address from the dynamic interface address pool.Sep 7 2024, 9:37 AM

kp added a child revision: D46596: pf: do not pass af to PFLOG_PACKET.

Looks good to me.

tests/sys/netpfil/pf/nat.sh
253	I'd prefer what we want, but not what we prevent.
256	Nits.

This revision is now accepted and ready to land.Sep 14 2024, 8:16 AM

patmaddox added a subscriber: patmaddox.Sep 19 2024, 5:09 PM

Closed by commit rG9746c1e28877: pf tests: ensure we don't NAT to link-local addresses (authored by kp). · Explain WhySep 19 2024, 8:22 PM

This revision was automatically updated to reflect the committed changes.

kp added a commit: rG9746c1e28877: pf tests: ensure we don't NAT to link-local addresses.

Revision Contents
Changeset List

Path

Size

tests/

sys/

netpfil/

pf/

nat.sh

52 lines

Diff 143492

View Options

tests/sys/netpfil/pf/nat.sh

pf tests: ensure we don't NAT to link-local addressesClosedPublicActions