Project

General

Profile

Actions
Copy link

Bug #5424

closed

outbound state not created for TCP IPv6 traffic matching route-to rule

Added by Chris Buechler over 8 years ago. Updated over 8 years ago.

Status:
Resolved
Priority:
High
Assignee:
Luiz Souza
Category:
Operating System
Target version:
2.3
Start date:
11/11/2015
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.3
Affected Architecture:

Description

IPv6 TCP traffic passed in by a rule specifying route-to on the ingress interface doesn't get a state created on the egress interface.

To replicate, just edit the default LAN rule for IPv6 and specify a gateway. All TCP traffic from LAN will stop working. The SYN leaves correctly, SYN ACK comes back and gets blocked because of the missing state.

Actions
Copy link

Also available in: Atom PDF