Project

General

Profile

Actions
Copy link

Regression #15197

closed

Outbound NAT rules using an alias without a matching address family create unexpected PF rules

Added by Marcos M 4 months ago. Updated 3 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Marcos M
Category:
Rules / NAT
Target version:
2.8.0
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
24.03
Release Notes:
Default
Affected Version:
Affected Architecture:

Description

Create an Outbound NAT rule with:
- Do not NAT checked
- IPv4+IPv6 for address family
- Source <interface> subnets using an interface with only IPv6

Create an Outbound NAT rule with:
- Do not NAT checked
- IPv4 for address family
- Source <interface> subnets using an interface with only IPv6

These rules result in e.g.:

no nat on $ISP1  from any to any # TEST
no nat on $ISP1 inet from any to any # TEST

Instead of defaulting to a host of any, no rule should be generated.

Files

rulesNAT.txt (360 Bytes) rulesNAT.txt Georgiy Tyutyunnik, 01/31/2024 12:44 PM
Actions
Copy link

Also available in: Atom PDF