[Bug 280701] FreeBSD-SA-24:05 fix breaks ICMP/ICMP6 states handling in pf firewall (ping, traceroute)
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 09 Sep 2024 17:38:34 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280701
Gleb Smirnoff <glebius@FreeBSD.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |FIXED
Status|Open |Closed
--- Comment #81 from Gleb Smirnoff <glebius@FreeBSD.org> ---
The first and original regression reported with this bug has been resolved and
fixed. The original bug report
> replies to ping initiated from machines on networks behind pf firewall/NAT
> to anything outside the local networks get blocked (state violation),
> resulting in 'Request timed out'.
was fixed by 2da98eef1f35, 46c4fc50d301.
However, there are reports of more regressions remaining in the OPNsense fork,
that were not confirmed on FreeBSD, yet. With the official policy of one bug
per bug report the FreeBSD core team is forcing this bug into closed state.
For any other bugs related or not to SA-24:05 we request submitters to create
separate bug reports. We also recommend to provide at least reproduce recipes
or at most atf(7) automated test cases. That would speed up bug resolving
immensely.
Finally, I'd like to remind that the project code of conduct applies not only
to the developers with a commit access, but to all participants in any
discussion in the project space:
https://www.freebsd.org/internal/code-of-conduct/
--
You are receiving this mail because:
You are the assignee for the bug.