Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 25 Oct 2014 10:20:50 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 194592] New: pf not adding all IP addresses when hostname used in table
Message-ID:  <bug-194592-8@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194592

            Bug ID: 194592
           Summary: pf not adding all IP addresses when hostname used in
                    table
           Product: Base System
           Version: 10.0-RELEASE
          Hardware: amd64
                OS: Any
            Status: Needs Triage
          Severity: Affects Many People
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs@FreeBSD.org
          Reporter: jason.mann@gmail.com

- Overview:

The pf.conf(5) man page states the following under the TABLES section:

"In addition to being specified by IP address, hosts may also be specified by
their hostname.  When the resolver is called to add a hostname to a table, all
resulting IPv4 and IPv6 addresses are placed into the table."

pf is not exhibiting this behaviour.  It is failing to add IPv6 addresses when
a table is initialised from a file containing a hostname that resolves to both
an IPv4 and IPv6 address:

This is either a bug in pf, or an inaccuracy in the pf man page.


- Steps to Reproduce:

1. Create a file to be used to initialise a pf table, containing a hostname
that resolves to both an IPv4 and and IPv6 address.
2. Add table declaration to pf.conf referencing the file
3. Reload pf configuration
4. Use pfctl to check entries in the table


- Actual Results:

# dig +short any beastie.b0rken.org
31.193.132.199
2a02:af8:1000:e6::1fc1:84c7

# cat /etc/pf.table.test
beastie.b0rken.org

# grep "<test>" /etc/pf.conf
table <test> persist file "/etc/pf.table.test"

# pfctl -Ts -t test
   31.193.132.199


- Expected Results:

# pfctl -Ts -t test
   31.193.132.199
   2a02:af8:1000:e6::1fc1:84c7

-- 
You are receiving this mail because:
You are the assignee for the bug.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-194592-8>