Project

General

Profile

Actions

Regression #13459

closed

Automatic ``reply-to`` bypass for traffic in the same subnet is no longer functioning in main builds

Added by Steve Wheeler about 2 years ago. Updated almost 2 years ago.

Status:
Resolved
Priority:
High
Category:
Rules / NAT
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
23.01
Release Notes:
Force Exclusion
Affected Version:
2.7.0
Affected Architecture:
All

Description

The patch we had to by-pass reply-to tagging for traffic sourced from the same subnet is not in main builds.

That means traffic from a client in the WAN subnet can no longer access the pfSense WAN IP address because replies go back to the gateway instead of directly.

This is a functional change that would affect a lot of users.

The behaviour should be restored either by a similar patch or by an automated rule with reply-to disabled when required.

Actions

Also available in: Atom PDF