| #
6e7f24e0 |
| 04-Mar-2025 |
Kristof Provost <kp@FreeBSD.org> |
pf: fix nat64 ICMP translation
Fix more incorrect use of the iih pointer, this time causing corruption in nat64
translated ICMP error messages.
Extend the relevant test case to catch this bug.
Spon
pf: fix nat64 ICMP translation
Fix more incorrect use of the iih pointer, this time causing corruption in nat64
translated ICMP error messages.
Extend the relevant test case to catch this bug.
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D49231
show more ...
|
| #
2f774911 |
| 25-Feb-2025 |
Kristof Provost <kp@FreeBSD.org> |
pf tests: test ICMP error translation with nat64
Ensure that when we translate an ICMPv4 to ICMPv6 message we set the correct
source IP address.
PR: 284944
Sponsored by: Rubicon Communications, LL
pf tests: test ICMP error translation with nat64
Ensure that when we translate an ICMPv4 to ICMPv6 message we set the correct
source IP address.
PR: 284944
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D49144
show more ...
|
|
Revision tags: release/14.2.0-p2, release/14.1.0-p8, release/13.4.0-p4 |
|
| #
65cc5af1 |
| 12-Feb-2025 |
Jose Luis Duran <jlduran@FreeBSD.org> |
sys tests: Add scapy as a required program
These atf-python tests rely on scapy to run.
Add it as a required program.
Reported by: glebius, kp
Reviewed by: kp
Approved by: emaste (mentor)
MFC after
sys tests: Add scapy as a required program
These atf-python tests rely on scapy to run.
Add it as a required program.
Reported by: glebius, kp
Reviewed by: kp
Approved by: emaste (mentor)
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D48946
show more ...
|
|
Revision tags: release/14.1.0-p7, release/14.2.0-p1, release/13.4.0-p3 |
|
| #
5d121937 |
| 16-Dec-2024 |
Kristof Provost <kp@FreeBSD.org> |
pf: teach nat64 to handle 0 UDP checksums
For IPv4 it's valid for a UDP checksum to be 0 (i.e. no checksum). This isn't
the case for IPv6, so if we translate a UDP packet from IPv4 to IPv6 we need t
pf: teach nat64 to handle 0 UDP checksums
For IPv4 it's valid for a UDP checksum to be 0 (i.e. no checksum). This isn't
the case for IPv6, so if we translate a UDP packet from IPv4 to IPv6 we need to
ensure that the checksum is calculated.
Add a test case to verify this. Rework the server jail so it can listen for TCP
and UDP packets at the same time.
Sponsored by: Rubicon Communications, LLC ("Netgate")
show more ...
|
|
Revision tags: release/14.2.0 |
|
| #
b717c676 |
| 18-Nov-2024 |
Kristof Provost <kp@FreeBSD.org> |
pf tests: verify that we preserve the hop limit/TTL for ICMP errors
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D47802
|
| #
373d6dbf |
| 11-Nov-2024 |
Kristof Provost <kp@FreeBSD.org> |
pf tests: verify that ICMP destination unreachable makes it through NAT64
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D47798
|
| #
bc66cb3b |
| 08-Nov-2024 |
Kristof Provost <kp@FreeBSD.org> |
pf tests: verify that ICMP port unreachable makes it through NAT64
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D47797
|
| #
a4e04032 |
| 08-Nov-2024 |
Kristof Provost <kp@FreeBSD.org> |
pf tests: verify that TCP RST makes it through NAT64
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D47796
|