d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
09f28e1bf1
freebsd-dev/sys
History
Kristof Provost 2f6c345adf pf: Fix misdetection of forwarding when net.link.bridge.pfil_bridge is set 
If net.link.bridge.pfil_bridge is set we can end up thinking we're forwarding in
pf_test6() because the rcvif and the ifp (output interface) are different.
In that case we're bridging though, and the rcvif the the bridge member on which
the packet was received and ifp is the bridge itself.
If we'd set dir to PF_FWD we'd end up calling ip6_forward() which is incorrect.

Instead check if the rcvif is a member of the ifp bridge. (In other words, the
if_bridge is the ifp's softc). If that's the case we're not forwarding but
bridging.

PR:	202351
Reviewed by:	eri
Differential Revision:	https://reviews.freebsd.org/D3534
2015-09-01 19:04:04 +00:00
..
amd64 Remove an unneeded instruction. 2015-08-28 00:17:21 +00:00
arm Clean up the style of the LEAVE_HYP macro. 2015-08-31 09:39:16 +00:00
arm64 Add support for the dwc usb in the HiSilicon hi6220 in the HiKey board. For 2015-09-01 17:13:04 +00:00
boot Install the forth bits on arm64. For now limit it to just arm64 as on x86 2015-09-01 13:51:07 +00:00
bsm
cam Make most of port methods optional and remove bunch of dummies. 2015-09-01 16:28:06 +00:00
cddl Apply the noline attribute to vdev_queue_max_async_writes 2015-08-31 23:10:42 +00:00
compat Decompose linkat()/renameat() rights to source and target. 2015-08-27 15:16:41 +00:00
conf Add support for the dwc usb in the HiSilicon hi6220 in the HiKey board. For 2015-09-01 17:13:04 +00:00
contrib Fix compilation error on gcc-5.2.0 - it now warns on non-paranthen'ed 2015-08-30 08:46:50 +00:00
crypto const'ify an arg that we don't update... 2015-07-29 23:37:15 +00:00
ddb Make kstack_pages a tunable on arm, x86, and powepc. On i386, the 2015-08-10 17:18:21 +00:00
dev Add support for the dwc usb in the HiSilicon hi6220 in the HiKey board. For 2015-09-01 17:13:04 +00:00
fs Fix an NFS server bug that manifested in "ls -al" displaying a plus 2015-08-28 14:26:11 +00:00
gdb CALLOUT_MPSAFE has lost its meaning since r141428, i.e., for more than ten 2015-05-22 17:05:21 +00:00
geom Create a RouterBoard platform and use it to create a flash map 2015-08-22 05:50:18 +00:00
gnu Using consistent coding style to deal with error inside the loop. 2015-08-18 13:16:23 +00:00
i386 preload_search_info: make sure mod is set 2015-08-21 15:57:57 +00:00
isa
kern Exit notification for EVFILT_PROC removes knote from the knlist. In 2015-09-01 14:05:29 +00:00
kgssapi
libkern Remove checks for __ARM_EABI__, we only build for EABI now. 2015-07-09 21:02:40 +00:00
mips Enable hardfloat for assembly generation. 2015-08-24 19:09:56 +00:00
modules New 1-Wire bus implementation. 1-Wire controller is abstracted, though 2015-08-27 23:33:38 +00:00
net Simplify lla_rt_output()/nd6_add_ifa_lle() by setting lle state in 2015-08-31 05:03:36 +00:00
net80211 Replay r286410. Change KPI of how device drivers that provide wireless 2015-08-27 08:56:39 +00:00
netgraph * Address review (and add a bit myself). 2015-07-12 18:14:38 +00:00
netinet Put r284245 back in place: If at first this fix was seen as a temporary 2015-08-30 13:44:39 +00:00
netinet6 Simplify lla_rt_output()/nd6_add_ifa_lle() by setting lle state in 2015-08-31 05:03:36 +00:00
netipsec Make IPsec work with AES-GCM and AES-ICM (aka CTR) in OCF... IPsec 2015-08-04 17:47:11 +00:00
netnatm
netpfil pf: Fix misdetection of forwarding when net.link.bridge.pfil_bridge is set 2015-09-01 19:04:04 +00:00
netsmb
nfs
nfsclient
nfsserver
nlm
ofed Reinstate unify_tcp_port_space and associated code that was lost during 2015-08-12 22:09:58 +00:00
opencrypto Make IPsec work with AES-GCM and AES-ICM (aka CTR) in OCF... IPsec 2015-08-04 17:47:11 +00:00
pc98 Add missing ofw_machdep.h. Make x86 ofw_machdep.h work pc98 too. 2015-08-28 15:41:09 +00:00
powerpc The TLB1 TSIZE is a multiple of 4, not 2, so shift 2 bits, not 1. 2015-08-29 06:52:14 +00:00
rpc Set curvnet context inside the RPC code in more places. 2015-08-18 18:12:46 +00:00
security fd: make 'rights' a manadatory argument to fget* functions 2015-07-05 19:05:16 +00:00
sparc64 Rationalize BSD license on sys/*/include/in_cksum.h 2015-08-05 19:05:12 +00:00
sys Remove single-use macros obfuscating malloc(9) and free(9) calls. 2015-08-30 17:58:11 +00:00
teken Sync HPA and VPA implementations with CUP. 2015-08-24 07:49:27 +00:00
tools
ufs By doing file extension fast, it is possible to create excess supply 2015-09-01 13:07:27 +00:00
vm Handle held pages earlier in the inactive queue scan. 2015-09-01 06:21:12 +00:00
x86 Add missing ofw_machdep.h. Make x86 ofw_machdep.h work pc98 too. 2015-08-28 15:41:09 +00:00
xdr
xen xen: allow disabling PV disks and nics 2015-08-21 15:53:08 +00:00
Makefile Kill EoL whitespace. 2015-05-29 14:03:07 +00:00