Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 19 Sep 2023 07:34:46 +0000
From:      bugzilla-noreply@freebsd.org
To:        pf@FreeBSD.org
Subject:   [Bug 273924] pf Logging Issue: Missing NAT and RDR Translation Details in pflog
Message-ID:  <bug-273924-16861-044W3qqr0B@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-273924-16861@https.bugs.freebsd.org/bugzilla/>
References:  <bug-273924-16861@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D273924

Franco Fichtner <franco@opnsense.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |franco@opnsense.org

--- Comment #2 from Franco Fichtner <franco@opnsense.org> ---
pflog simply logs matching packages causing a rule to trigger and does not =
emit
rule metadata, because the reference to the rule is in the pflog header.

Since
https://cgit.freebsd.org/src/commit/sys/netpfil/pf?id=3D8e496ea1df1f00ea783=
2eb41754dbbb56dd244c8
the nat rules are logged separately from the filter rule and that's
pre-rewrite. The filter rule log will match post-write. It gives you an ide=
a of
how the address was rewritten, but only if you compare the two packet heade=
rs.


Cheers,
Franco

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-273924-16861-044W3qqr0B>