HomeFreeBSD

pf: align option handling for IPv4 and IPv6

Description

pf: align option handling for IPv4 and IPv6

Block IPv6 packets in pf(4) that have hop-by-hop options header or
destination options header. Such packets can be passed by adding
"allow-opts" to the rule. So IPv6 options are handled like their
counterpart in IPv4 now.
tested by benno@; OK henning@

Obtained from: OpenBSD, bluhm <bluhm@openbsd.org>, c50c83ac27
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D50662

Details

Provenance
kpAuthored on May 27 2025, 2:44 PM
Differential Revision
D50662: pf: align option handling for IPv4 and IPv6
Parents
rG7659d0fa2b87: pf tests: skip TestHeader6::test_too_many if ipfilter is loaded
Branches
Unknown
Tags
Unknown