Page MenuHomeFreeBSD

pf: fix synproxy to local
ClosedPublic

Authored by kp on Sep 6 2021, 8:05 AM.
Tags
None
Referenced Files
F166887465: D31853.id94707.diff
Mon, Aug 17, 1:16 PM
F166827909: D31853.id94707.diff
Sun, Aug 16, 9:33 PM
F166826938: D31853.id94950.diff
Sun, Aug 16, 9:29 PM
Unknown Object (File)
Sun, Aug 16, 8:25 PM
Unknown Object (File)
Fri, Aug 14, 10:54 PM
Unknown Object (File)
Fri, Aug 14, 7:36 PM
Unknown Object (File)
Thu, Aug 13, 12:14 PM
Unknown Object (File)
Tue, Aug 11, 11:57 PM

Details

Summary

When we're synproxy-ing a connection that's going to us (as opposed to a
forwarded one) we wound up trying to send out the pf-generated tcp
packets through pf_intr(), which called ip(6)_output(). That doesn't
work all that well for packets that are destined for us, so in that case
we must call ip(6)_input() instead.

MFC after: 1 week
Sponsored by: Modirum MDPay

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 41400
Build 38289: arc lint + arc unit