Project

General

Profile

Actions
Copy link

Bug #13621

open

GUI allows selection of ICMP types that pf rejects

Added by Chris Linstruth about 2 years ago. Updated over 1 year ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
Rules / NAT
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Default
Affected Version:
Affected Architecture:

Description

Example: selecting ICMP types any,echorep,echoreq cause pf to refuse to load the rule:

/rc.filter_configure_sync: New alert found: There were error(s) loading the rules: /tmp/rules.debug:259: syntax error - The line in question reads [259]: pass in quick on $SYNC inet proto icmp from 172.25.254.0/30 to 172.25.254.1 icmp-type { any,echorep,echoreq } ridentifier 1478221706 keep state label "USER_RULE: Default SYNC Rule" label "id:1478221706"

selecting only "any" or only "echorep,echoreq" loads fine.

Files

clipboard-202309240924-pqocc.png (7.15 KB) clipboard-202309240924-pqocc.png aleksei prokofiev, 09/24/2023 06:24 AM
Actions
Copy link

Also available in: Atom PDF