Page MenuHomeFreeBSD

pf: ensure we have the correct source/destination IP address in ICMP errors
ClosedPublic

Authored by kp on Oct 20 2021, 8:12 AM.
Tags
None
Referenced Files
F102395179: D32571.id97276.diff
Mon, Nov 11, 4:35 PM
Unknown Object (File)
Tue, Oct 15, 11:45 AM
Unknown Object (File)
Tue, Oct 15, 8:43 AM
Unknown Object (File)
Mon, Oct 14, 12:23 PM
Unknown Object (File)
Oct 4 2024, 7:20 PM
Unknown Object (File)
Oct 4 2024, 5:19 AM
Unknown Object (File)
Oct 1 2024, 11:31 PM
Unknown Object (File)
Sep 30 2024, 2:55 PM

Details

Summary

When we route-to a packet that later turns out to not fit in the
outbound interface MTU we generate an ICMP error.
However, if we've already changed those (i.e. we've passed through a NAT
rule) we have to undo the transformation first.

Obtained from: pfSense
MFC after: 3 weeks
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 42264
Build 39152: arc lint + arc unit