HomeFreeBSD

mbuf: PACKET_TAG_PF should not be persistent

Description

mbuf: PACKET_TAG_PF should not be persistent

We should clear firewall tags on loopback, icmp reflection, or if_epair
transmission. Left over tags can produce unexpected behaviour,
especially on if_epair where a and b interfaces can be in different
vnets, and have different firewall policies set.

MFC after: 3 weeks
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D32664

(cherry picked from commit 7fe0c3f8d3303b67e55e3abcd66cbd4a9eaa1a0d)

Details

Provenance
kpAuthored on Oct 26 2021, 7:51 AM
Differential Revision
D32664: mbuf: PACKET_TAG_PF should not be persistent
Parents
rGae23f081c5c7: if_epair: delete mbuf tags
Branches
Unknown
Tags
Unknown