Bug 194592

Summary: pf not adding all IP addresses when hostname used in table
Product: Base System Reporter: Jason Mann <jason.mann+freebsd>
Component: kernAssignee: freebsd-bugs (Nobody) <bugs>
Status: Closed FIXED    
Severity: Affects Many People CC: harrison.grundy
Priority: ---    
Version: 10.0-RELEASE   
Hardware: amd64   
OS: Any   

Description Jason Mann 2014-10-25 10:20:50 UTC
- Overview:

The pf.conf(5) man page states the following under the TABLES section:

"In addition to being specified by IP address, hosts may also be specified by their hostname.  When the resolver is called to add a hostname to a table, all resulting IPv4 and IPv6 addresses are placed into the table."

pf is not exhibiting this behaviour.  It is failing to add IPv6 addresses when a table is initialised from a file containing a hostname that resolves to both an IPv4 and IPv6 address:

This is either a bug in pf, or an inaccuracy in the pf man page.

- Steps to Reproduce:

1. Create a file to be used to initialise a pf table, containing a hostname that resolves to both an IPv4 and and IPv6 address.
2. Add table declaration to pf.conf referencing the file
3. Reload pf configuration
4. Use pfctl to check entries in the table

- Actual Results:

# dig +short any beastie.b0rken.org

# cat /etc/pf.table.test

# grep "<test>" /etc/pf.conf
table <test> persist file "/etc/pf.table.test"

# pfctl -Ts -t test

- Expected Results:

# pfctl -Ts -t test
Comment 1 Jason Mann 2014-11-17 09:40:03 UTC
This issue appears to be fixed in 10.1-RELEASE:

# pfctl -t test -T show
Comment 2 Harrison Grundy 2014-12-17 12:43:50 UTC
Fixed in 10 per reporter.