[Bug 284866] pf: state-policy if-bound breaks ICMPv6 error delivery

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=284866

Kristof Provost <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #1 from Kristof Provost <[email protected]> ---
Try this:

```
diff --git a/sys/netpfil/pf/pf.c b/sys/netpfil/pf/pf.c
index 8bd6c72ce05f..f9715cd18166 100644
--- a/sys/netpfil/pf/pf.c
+++ b/sys/netpfil/pf/pf.c
@@ -7793,6 +7793,7 @@ pf_test_state_icmp(struct pf_kstate **state, struct
pf_pdesc *pd,
                pd2.sidx = (pd->dir == PF_IN) ? 1 : 0;
                pd2.didx = (pd->dir == PF_IN) ? 0 : 1;
                pd2.m = pd->m;
+               pd2.kif = pd->kif;
                switch (pd->af) {
 #ifdef INET
                case AF_INET:
```

If that doesn't work re-try without PF_DEFAULT_TO_DROP, because that's know to
be buggy in at least one other situation.
Also gather state information and network captures.

-- 
You are receiving this mail because:
You are the assignee for the bug.