[Bug 295057] 14.4 breaks in-kernel nat

[email protected] Thu, 21 May 2026 21:22:14 +0000
Newsgroups gmane.os.freebsd.devel.net
Message-ID <[email protected]/bugzilla/>
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295057

--- Comment #18 from [email protected] ---
A commit in branch releng/15.1 references this bug:

URL:
https://cgit.FreeBSD.org/src/commit/?id=78de09e1412e2e720a2391457f65717248bad4f4

commit 78de09e1412e2e720a2391457f65717248bad4f4
Author:     Timo Völker <[email protected]>
AuthorDate: 2026-05-21 10:54:44 +0000
Commit:     Colin Percival <[email protected]>
CommitDate: 2026-05-21 21:21:05 +0000

    ipfw: fix checksum after NAT

    When checksum offloading is used, IPFW needs to fix the checksum
    after libalias has done NAT. The ipfw_nat() function does so, but
    only for mbufs without a receiving interface. However, if, for example,
    the packet was sent inside a jail that used checksum offloading over
    an epair, ipfw still needs to fix the checksum even though the mbuf
    has set a receiving interface (epair).
    This patch just removes the check whether a receiving interface is set.

    Approved by:    re (cperciva)
    PR:                     295057
    Reviewed by:            tuexen
    Differential Revision:  https://reviews.freebsd.org/D57091

    (cherry picked from commit 81b47a7c604f1d563283759572fa7a1f9d4dc56f)
    (cherry picked from commit 198379d2c29fae7300b650a96199e51a66b87364)

 sys/netpfil/ipfw/ip_fw_nat.c | 15 +++++++--------
 1 file changed, 7 insertions(+), 8 deletions(-)

-- 
You are receiving this mail because:
You are the assignee for the bug.