Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 31 Jul 2025 18:14:55 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 288577] pf: pass out ... rdr-to changes source address instead of destination address
Message-ID:  <bug-288577-227@https.bugs.freebsd.org/bugzilla/>

index | next in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=288577

            Bug ID: 288577
           Summary: pf: pass out ... rdr-to changes source address instead
                    of destination address
           Product: Base System
           Version: 15.0-CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: ivy@FreeBSD.org

according to pf.conf(5), rdr-to should change the destination address of a
packet.  however, in practice, it changes the source address.

the traffic without rdr-to rule:

19:12:44.189279 IP6 2001:8b0:aab5:1::1 > 64:ff9b::141a:9cd7: ICMP6, echo
request, id 56445, seq 0, length 16

after adding the rdr-to rule:

pass out quick on $inet_if from <lf> to 64:ff9b::/96 rdr-to
2001:8b0:6464:0:66::/96

the traffic:

19:13:10.880660 IP6 2001:8b0:6464:0:66:: > 64:ff9b::141a:9cd7: ICMP6, echo
request, id 128, seq 2, length 16

the destination address is unchanged, but the source address has been modified.

this might be user error, but based on the pf.conf manpage, i would expect this
to work.

-- 
You are receiving this mail because:
You are the assignee for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-288577-227>