https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=237477

Kristof Provost <k...@freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |k...@freebsd.org

--- Comment #1 from Kristof Provost <k...@freebsd.org> ---
I think I see what's going on there.
PF_DEFAULT_TO_DROP sets V_pf_default_rule.action = PF_DROP;

A 'rdr pass' sets the 'natpass' flag on a rule (I think, not 100% sure), which
causes us to do:
if (nr->natpass)
    r = NULL;

in pf_test_rule().
That's intended to just select the default rule, which usually passes traffic.
With 'PF_DEFAULT_TO_DROP' that doesn't work as expected.

Note that I'm not picking this bug up right now. It's on my todo list with many
dozens of others. I make no promises about when I'll come back to this.

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
freebsd-net@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Reply via email to