Bug #13621
open
GUI allows selection of ICMP types that pf rejects
0%
Description
Example: selecting ICMP types any,echorep,echoreq cause pf to refuse to load the rule:
/rc.filter_configure_sync: New alert found: There were error(s) loading the rules: /tmp/rules.debug:259: syntax error - The line in question reads [259]: pass in quick on $SYNC inet proto icmp from 172.25.254.0/30 to 172.25.254.1 icmp-type { any,echorep,echoreq } ridentifier 1478221706 keep state label "USER_RULE: Default SYNC Rule" label "id:1478221706"
selecting only "any" or only "echorep,echoreq" loads fine.
Files
Updated by Lev Prokofev almost 2 years ago
Can confirm that behavior on 22.05 and 23.01 Beta
There were error(s) loading the rules: /tmp/rules.debug:430: syntax error - The line in question reads [430]: pass in quick on $OpenVPN inet proto icmp from 192.168.24.0/24 to any icmp-type { any,echorep,echoreq } ridentifier 1652883442 keep state label "USER_RULE" label "id:1652883442"
End of configuration backup to https://acb.netgate.com/save (success).
Updated by aleksei prokofiev over 1 year ago
Tested on
23.05.1-RELEASE (amd64)
built on Wed Jun 28 03:57:27 UTC 2023
FreeBSD 14.0-CURRENT
23.09-DEVELOPMENT (amd64)
built on 20230922-1539
FreeBSD 14.0-CURRENT
I can't reproduce