freebsd-src/sys/netpfil
Kristof Provost a983cea4e9 pf: fix reply-to after rdr and dummynet
If we redirect a packet to localhost and it gets dummynet'd it may be
re-injected later (e.g. when delayed) which means it will be passed
through ip_input() again. ip_input() will then reject the packet because
it's directed to the loopback address, but did not arrive on a loopback
interface.

Fix this by having pf set the rcvif to V_iflo if we redirect to
loopback.

See also:	https://redmine.pfsense.org/issues/15363
Sponsored by:	Rubicon Communications, LLC ("Netgate")
2024-03-28 17:06:01 +01:00
..
ipfilter/netinet pfil: PFIL_PASS never frees the mbuf 2024-01-29 14:10:19 +01:00
ipfw ipfw: Skip to the start of the loop when following a keep-state rule 2024-02-15 17:57:51 -08:00
pf pf: fix reply-to after rdr and dummynet 2024-03-28 17:06:01 +01:00