Bug 93825
| Summary: | [pf] pf reply-to doesn't work | ||
|---|---|---|---|
| Product: | Base System | Reporter: | Vlad GALU <vladgalu> |
| Component: | kern | Assignee: | freebsd-pf (Nobody) <pf> |
| Status: | Closed FIXED | ||
| Severity: | Affects Only Me | CC: | cmb, kp |
| Priority: | Normal | ||
| Version: | 6.1-PRERELEASE | ||
| Hardware: | Any | ||
| OS: | Any | ||
Responsible Changed From-To: freebsd-bugs->freebsd-pf Over to maintainer(s). reply-to definitely works in all currently-supported FreeBSD releases. This is safe to close. Closing based on the report in comment #2. |
This is a multihomed machine. I expect replies to requests that came on one interface to leave the machine on the same interface. This doesn't happen. How-To-Repeat: Assuming you have packets coming in through $local_if, and the following ruleset: pass in quick on $local_if reply-to ($local_if $local_gw) \ inet proto tcp from any to ($local_if) \ port = 80 flags S/SA keep state This rule does create state, but the packets leave the machine through the interface the default route is connected to, which is not $local_if.