[Bug 280701] FreeBSD-SA-24:05 fix breaks ICMP/ICMP6 states handling in pf firewall (ping, traceroute)

From: <bugzilla-noreply_at_freebsd.org>
Date: Fri, 23 Aug 2024 21:48:49 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280701

Gordon Tetlow <gordon@FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |gordon@FreeBSD.org

--- Comment #44 from Gordon Tetlow <gordon@FreeBSD.org> ---
(In reply to Franco Fichtner from comment #43)

Franco, from our testing and practical experience, we are not seeing this issue
manifest itself in the stock FreeBSD kernel once the fixes are applied. All of
the continued reports appear to only affect OpnSense kernels. If there is a
reliable report this is continuing to be a problem with stock FreeBSD kernels,
we would be happy to look at it. Unfortunately, the evidence is "this is a
problem with OpnSense." As  Dr. Uwe Meyer-Gruhl states in comment #42, if this
can be reproduced with a plain vanilla FreeBSD kernel, we would love the
opportunity to see the details to ferret out the issues. If such testing does
occur, please let us know and we'll be happy to reopen this issue.

-- 
You are receiving this mail because:
You are the assignee for the bug.