Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 06 Jun 2017 03:07:48 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-pf@FreeBSD.org
Subject:   [Bug 219803] [patch] PF: implement RFC 4787 REQ 1 and 3 (full cone NAT)
Message-ID:  <bug-219803-17777-S4q7rkU27r@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-219803-17777@https.bugs.freebsd.org/bugzilla/>
References:  <bug-219803-17777@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D219803

Kristof Provost <kp@freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kp@freebsd.org

--- Comment #1 from Kristof Provost <kp@freebsd.org> ---
Can you go into a bit more detail of what problem you're trying to solve wi=
th
this patch, in its current state?

I think I can see the use case for the extended patch (where you allow pack=
ets
from any Z:z back to X:x), but I'd certainly object to that, as it's a
significant behaviour change. It removes the accidental stateful firewall
aspect of the NAT implementation.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-219803-17777-S4q7rkU27r>