freebsd-src/sys/netpfil
Kristof Provost 56b7685ae3 pf: handle IPv6 fragmentation for route-to
If a fragmented IPv6 packet hits a route-to rule we have to first prevent
the pf_test(PF_OUT) check in pf_route6() from refragmenting (and calling
ip6_output()/ip6_forward()). We then have to refragment in pf_route6() and
transmit the packets on the route-to interface.

Split pf_refragment6() into two parts, the first to perform the refragmentation,
the second to call ip6_output()/ip6_forward() and call the former from
pf_route6().

Add a test case for route-to-ing fragmented IPv6 packets to verify this works
as expected.

Sponsored by:	Rubicon Communications, LLC ("Netgate")
Differential Revision:	https://reviews.freebsd.org/D47684
2024-11-26 15:06:52 +01:00
..
ipfilter/netinet ipfilter: Remove dead code from "Virtualize ipfilter" 2024-11-12 13:58:59 -08:00
ipfw ipfw: fix order of memcpy arguments. 2024-11-23 15:52:43 +03:00
pf pf: handle IPv6 fragmentation for route-to 2024-11-26 15:06:52 +01:00