[Bug 259183] pf_route drops packets for traffic not matching a rule
Date: Fri, 15 Oct 2021 11:17:07 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=259183 Bug ID: 259183 Summary: pf_route drops packets for traffic not matching a rule Product: Base System Version: 13.0-STABLE Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: kern Assignee: bugs@FreeBSD.org Reporter: vegeta@tuxpowered.net Created attachment 228719 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=228719&action=edit Don't drop packets when redirection information comes from a state For some traffic there might be no matching rule in the current ruleset, for example when a state was imported via pfsync from a sytem with a different ruleset checksum. In this case pf_route uses s->rt_addr for routing target instead of r->rpool.cur but r->rpool is checked anyway, resulting in dropped packets. If the patch gets accepted, please add the usual footer to commit: Submitted by: Kajetan Staszkiewicz <vegeta tuxpowered.net> Sponsored by: InnoGames GmbH -- You are receiving this mail because: You are the assignee for the bug.