Page MenuHomeFreeBSD
Differential D50662

pf: align option handling for IPv4 and IPv6
ClosedPublic
Actions

Authored by kp on Jun 3 2025, 12:49 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Jan 19, 8:07 PM
Unknown Object (File)
Sun, Jan 18, 4:38 PM
Unknown Object (File)
Fri, Jan 16, 5:19 AM
Unknown Object (File)
Wed, Jan 14, 1:11 AM
Unknown Object (File)
Sat, Jan 10, 4:28 AM
Unknown Object (File)
Sat, Jan 10, 4:28 AM
Unknown Object (File)
Tue, Jan 6, 1:05 AM
Unknown Object (File)
Fri, Dec 26, 2:20 PM
View All 66 Files
Subscribers
farrokhi
glebius
imp
melifaro
vegeta_tuxpowered.net
ziaee

Details

Reviewers
None
Group Reviewers
pfsense
Commits
rGee97d8918389: pf: align option handling for IPv4 and IPv6
Summary

Block IPv6 packets in pf(4) that have hop-by-hop options header or
destination options header. Such packets can be passed by adding
"allow-opts" to the rule. So IPv6 options are handled like their
counterpart in IPv4 now.
tested by benno@; OK henning@

Obtained from: OpenBSD, bluhm <bluhm@openbsd.org>, c50c83ac27
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 64611
Build 61495: arc lint + arc unit

Revision Contents
Changeset List

PathSize
share/
man/
man5/
13 lines
sys/
netpfil/
pf/
11 lines

Diff 156468

View Options

share/man/man5/pf.conf.5

Loading...
View Options

sys/netpfil/pf/pf.c

Loading...