Re: kern/53199: stateful npf

[Patrick Welche <prlw1%cam.ac.uk@localhost>]

The following reply was made to PR kern/53199; it has been noted by GNATS.

From: Patrick Welche <prlw1%cam.ac.uk@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: kern/53199: stateful npf
Date: Fri, 11 May 2018 16:28:25 +0100

 On Thu, May 10, 2018 at 10:35:01AM +0000, Patrick Welche wrote:
 >  >  Now it looks like a routing issue: "working" were all on a local network.
 >  >  I probably didn't think that through properly.
 
 I have the default route pointing to the internal interface. With npf,
 the webserver's reply gets the default route applied to it, so doesn't
 go through the external interface's rule, which contains the keep state
 rule.
 
 I just checked with ipf, and the reply from the webserver DOES go out
 of the external interface despite the default route pointing to the
 internal interface, so everything works as expected.
 
 Is this diffence in behaviour intended?