pf synproxy broken

From: Yuriy N. Shkandybin <jura_at_networks.ru>
Date: Thu, 6 Oct 2005 11:11:32 +0400
Hello.

Please look at PR  86072.
I've confirm that this issue exist in latest STABLE and HEAD.

How it looks:
1) without synproxy
 telnet localhost 22
Trying ::1...
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
SSH-2.0-OpenSSH_4.2p1 FreeBSD-20050903

2) with synproxy
pass in log on lo0 proto tcp from any to any port 22 flags S/SA synproxy state
 telnet localhost 22
Trying ::1...
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.


That's all no actual connection.

netstat:
tcp4       0      0  127.0.0.1.45427        127.0.0.1.22           ESTABLISHED

pfÓtl -s state
self tcp 127.0.0.1:22 <- 127.0.0.1:45427       PROXY:DST


Jura
Received on Thu Oct 06 2005 - 05:13:31 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:44 UTC