Date: Mon, 09 Sep 2024 17:38:34 +0000 From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 280701] FreeBSD-SA-24:05 fix breaks ICMP/ICMP6 states handling in pf firewall (ping, traceroute) Message-ID: <bug-280701-7501-zm9ygjlpHU@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-280701-7501@https.bugs.freebsd.org/bugzilla/> References: <bug-280701-7501@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D280701 Gleb Smirnoff <glebius@FreeBSD.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|Open |Closed --- Comment #81 from Gleb Smirnoff <glebius@FreeBSD.org> --- The first and original regression reported with this bug has been resolved = and fixed. The original bug report > replies to ping initiated from machines on networks behind pf firewall/NAT > to anything outside the local networks get blocked (state violation), > resulting in 'Request timed out'. was fixed by 2da98eef1f35, 46c4fc50d301. However, there are reports of more regressions remaining in the OPNsense fo= rk, that were not confirmed on FreeBSD, yet. With the official policy of one b= ug per bug report the FreeBSD core team is forcing this bug into closed state. For any other bugs related or not to SA-24:05 we request submitters to crea= te separate bug reports. We also recommend to provide at least reproduce reci= pes or at most atf(7) automated test cases. That would speed up bug resolving immensely. Finally, I'd like to remind that the project code of conduct applies not on= ly to the developers with a commit access, but to all participants in any discussion in the project space: https://www.freebsd.org/internal/code-of-conduct/ --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-280701-7501-zm9ygjlpHU>