pf-linux-port/tests/confs/min.conf at 2690d6145cee84eef6d145ee5b185b0463f83643 - pf-linux-port - Gitea Labexposed

lgcosta/pf-linux-port

0 Fork 0

mirror of https://github.com/lgcosta/pf-linux-port.git synced 2026-11-12 20:15:36 -03:00

Files

T

lgcosta 5323ee2c71 M2: live netfilter data path (pf_test per direction), pfattach bring-up, NET_LOCK reentrancy fix, static pfctl

- pfk_hooks: PRE→PF_IN, LOCAL_OUT/POST→PF_OUT v4+v6; replacement/buffer
  handling with NF_STOLEN + re-injection (documented divergence: re-entry)
- pfk_mod: pf_status_init/pfattach + pfi attach via pfk_if event callback
- pfk_kern: NET_LOCK holder reentrancy (fix deadlock when notifier fires
  under the write lock — observed as full-VM network hang)
- tools: static pfctl link for musl VMs

2026-11-11 15:20:01 -03:00

5 lines

160 B

Plaintext

Raw Blame History

 # first M2 smoke: allow everything on lan/wan, block icmp to blackhole
 pass in quick on lan
 pass out quick
 block drop in quick proto icmp from any to 10.0.2.99