opnsense-src/sbin/pfctl
Kristof Provost 491f5e37ae pf: add 'allow-related' to always allow SCTP multihome extra connections
Allow users to choose to allow permitted SCTP connections to set up additional
multihomed connections regardless of the ruleset. That is, allow an already
established connection to set up flows that would otherwise be disallowed.

In case of if-bound connections we initially set the extra associations to
be floating, because we don't know what path they'll be taking when they're
created. Once we see the first traffic we can bind them.

MFC after:	2 weeks
Sponsored by:	Orange Business Services
Differential Revision:	https://reviews.freebsd.org/D48453

(cherry picked from commit e4f2733df8c9d2fd0c5e8fdc8bec002bf39811f3)
2025-01-30 12:00:31 +01:00
..
tests pfctl tests: fix dependency 2024-09-04 10:38:14 +02:00
Makefile Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
Makefile.depend Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
parse.y pf: add 'allow-related' to always allow SCTP multihome extra connections 2025-01-30 12:00:31 +01:00
pf.os Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
pf_print_state.c Remove $FreeBSD$: one-line .c pattern 2023-08-16 11:54:42 -06:00
pf_ruleset.c Remove $FreeBSD$: one-line .c pattern 2023-08-16 11:54:42 -06:00
pfctl.8 pfctl: add -T reset to touch pfras_tzero only for non-zero entries 2024-12-24 11:16:53 +01:00
pfctl.c pfctl: add -T reset to touch pfras_tzero only for non-zero entries 2024-12-24 11:16:53 +01:00
pfctl.h pfctl: clear statistic for specified addresses 2024-12-14 11:03:27 +01:00
pfctl_altq.c Remove $FreeBSD$: one-line .c pattern 2023-08-16 11:54:42 -06:00
pfctl_ioctl.h pfctl: Move ioctl abstraction functions into libpfctl 2021-04-10 11:16:02 +02:00
pfctl_optimize.c pfctl: use libpfctl instead of DIOCGETRULES directly 2023-12-04 16:20:57 +01:00
pfctl_osfp.c Remove $FreeBSD$: one-line .c pattern 2023-08-16 11:54:42 -06:00
pfctl_parser.c pf: expose more syncookie state information to userspace 2023-11-13 08:10:27 +01:00
pfctl_parser.h pfctl: fix incorrect mask on dynamic address 2023-10-27 09:45:55 +02:00
pfctl_qstats.c Remove $FreeBSD$: one-line .c pattern 2023-08-16 11:54:42 -06:00
pfctl_radix.c pfctl: add -T reset to touch pfras_tzero only for non-zero entries 2024-12-24 11:16:53 +01:00
pfctl_table.c pfctl: add -T reset to touch pfras_tzero only for non-zero entries 2024-12-24 11:16:53 +01:00