Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 17 Mar 2015 22:00:26 -0400
From:      John Jasen <jjasen@gmail.com>
To:        FreeBSD Net <freebsd-pf@freebsd.org>
Subject:   bug in tftp-proxy, unable to write rdr rules
Message-ID:  <5508DC3A.4070603@gmail.com>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=198674

<snip>

In FreeBSD 10.1-RELEASE-p6, a rule similar to the below will result in no tftp connection, and entries in /var/log/messages such as: 

"Mar 17 23:38:28 vm-fbd-fw-02 tftp-proxy[28376]: pf connection lookup failed (no rdr?)"


rdr pass log on em0 proto udp from 10.0.0.0/24 to 10.0.0.5 port 69 \
   -> 127.0.0.1 port 6969

The error comes from:
/usr/src/contrib/pf/tftp-proxy.c:
"        /* find the un-rdr'd server and port the client wanted */
        if (server_lookup((struct sockaddr *)&from,
            (struct sockaddr *)&proxy, (struct sockaddr *)&server,
            IPPROTO_UDP) != 0) {
                syslog(LOG_ERR, "pf connection lookup failed (no rdr?)");
                exit(1); 
        }
"

This did not happen in FreeBSD 10.0.

</snip>





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5508DC3A.4070603>