Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 13 Jan 2017 03:05:45 +0000 (UTC)
From:      Luiz Otavio O Souza <loos@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-stable@freebsd.org, svn-src-stable-11@freebsd.org
Subject:   svn commit: r312004 - stable/11/sbin/pfctl
Message-ID:  <201701130305.v0D35jSG014298@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: loos
Date: Fri Jan 13 03:05:44 2017
New Revision: 312004
URL: https://svnweb.freebsd.org/changeset/base/312004

Log:
  MFC r310707:
  
  Fix the parsing of NPt binat rules.
  In this specific case the src address can be set to any, which was not
  accepted prior to this commit.
  
  pfSense bug report:	https://redmine.pfsense.org/issues/6985
  Reviewed by:	kp
  Obtained from:	pfSense
  Sponsored by:	Rubicon Communications, LLC (Netgate)

Modified:
  stable/11/sbin/pfctl/parse.y
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sbin/pfctl/parse.y
==============================================================================
--- stable/11/sbin/pfctl/parse.y	Fri Jan 13 02:12:58 2017	(r312003)
+++ stable/11/sbin/pfctl/parse.y	Fri Jan 13 03:05:44 2017	(r312004)
@@ -4191,7 +4191,7 @@ natrule		: nataction interface af proto 
 		}
 		;
 
-binatrule	: no BINAT natpasslog interface af proto FROM host toipspec tag
+binatrule	: no BINAT natpasslog interface af proto FROM ipspec toipspec tag
 		    tagged rtable redirection
 		{
 			struct pf_rule		binat;



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201701130305.v0D35jSG014298>