Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 05 Aug 2022 14:18:09 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 265649] [pf]: regression: PF ignores translation settings on gre(4)
Message-ID:  <bug-265649-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D265649

            Bug ID: 265649
           Summary: [pf]: regression: PF ignores translation settings on
                    gre(4)
           Product: Base System
           Version: 13.1-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: eugene@zhegan.in

Starting from 13.0 PF ignores translation settings for gre(3) (at least !)
interfaces.

PF rules:

nat on gre0 inet proto tcp from <mylans> to any -> 10.4.0.42

<mylans> table:

# pfctl -t mylans -T show
   10.8.0.0/24
   172.16.0.1
   192.168.52.0/24
   192.168.53.0/24
   192.168.54.0/24
   192.168.55.0/24
   192.168.56.0/24
   192.168.57.0/24
   192.168.58.0/24
   192.168.59.0/24
   192.168.60.0/24
   192.168.100.0/24
   192.168.175.0/24
   192.168.176.0/24

PF rules with counters:

@3 nat on gre0 inet proto tcp from <mylans:14> to any -> 10.4.0.42
  [ Evaluations: 113076    Packets: 0         Bytes: 0           States: 0=
=20=20=20=20
]
  [ Inserted: uid 0 pid 77972 State Creations: 0     ]

tcpdump on outer interface:

17:03:32.713893 IP 188.17.155.29 > 89.249.17.74: GREv0, length 64: IP
192.168.57.23.50768 > 10.3.51.63.22: Flags [S], seq 384973512, win 29200,
options [mss 1460,sackOK,TS val 4036935166 ecr 0,nop,wscale 7], length 0
17:03:33.715044 IP 188.17.155.29 > 89.249.17.74: GREv0, length 64: IP
192.168.57.23.50768 > 10.3.51.63.22: Flags [S], seq 384973512, win 29200,
options [mss 1460,sackOK,TS val 4036936168 ecr 0,nop,wscale 7], length 0

Had to use ipfw for that.
This was working across all of the 6.x -> 12.x versions.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-265649-227>