[Bug 268717] [pf] rdr rules don't work for traffic originating at localhost

From: <bugzilla-noreply_at_freebsd.org>
Date: Fri, 06 Jan 2023 08:13:21 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=268717

--- Comment #8 from dfr@rabson.org ---
I was also wary of adding complexity to pf_test although there is some
precedent here - pf_route does recurse back to pf_test. The other idea I had
was to add a second packet filter call from ip_input and ip6_input at the point
where the packet is accepted as local but before its handed off to tcp (or udp)
but that seemed a riskier option.

Perhaps the PF_OUT test for packets with local destination could be performed
in pf_route which would leave pf_test alone?

-- 
You are receiving this mail because:
You are the assignee for the bug.