Date: Mon, 24 Nov 2025 10:56:37 +0000 From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 290768] if_wg(4): handshake response has src and dst reverse Message-ID: <bug-290768-7501-QdEv0afgaN@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-290768-7501@https.bugs.freebsd.org/bugzilla/> References: <bug-290768-7501@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290768 --- Comment #23 from relvy <it@vineyard-sha.de> --- (In reply to vova from comment #20) I took out the carp backup machine from production environment and put it into a testbed with a single subnet 10.2.0.0/16. I am able to reproduce it there, too. I stripped it down to figure out what is necessary to reproduce. I removed the LAN CARP: issue is still reproduceable. I removed wg0 and kept wg1: issue is still reproduceable. What I have now is: Infrastructure: opnsense WAN ------------ opnsense WAN CARP ------- peer (road warrior) igc0 10.2.1.30 a.b.c.d peer initiates handshake: opnsense WAN ------------ opnsense WAN CARP ----- peer (road warrior) igc0 10.2.1.30:51820 <------- a.b.c.d outgoing traffic: LAN opnsense WAN ------------ opnsense WAN CARP ----- peer (road warrior) igc0 -- outbound NAT --> 10.2.1.30 -----------> a.b.c.d a.b.c.d is the peer address, an DHCP address from 10.2.0.x/16 # pfctl -s states | grep 51820 all udp 10.2.1.30:51820 <- a.b.c.d:53003 NO_TRAFFIC:SINGLE all udp a.b.c.d:53003 -> 10.2.1.30:51820 SINGLE:NO_TRAFFIC -- You are receiving this mail because: You are the assignee for the bug.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-290768-7501-QdEv0afgaN>
