NetBSD-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

bin/59511: some variable addresses not processed by firewall rules.



>Number:         59511
>Category:       bin
>Synopsis:       some variable addresses not processed by firewall rules.
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jul 05 10:40:00 +0000 2025
>Originator:     Emmanuel Nyarko
>Release:        NetBSD 10.0
>Organization:
NetBSD
>Environment:
NetBSD 10.0 amd64
>Description:
packets from some of my blocklist addresses that are appended in variables passes.
192.168.100.8 passes but those from 192.168.100.5 rightly gets blocked.
>How-To-Repeat:
$home = { 192.168.100.5, 192.168.100.8}
$office = {192.168.64.3, 192.168.64.9}
$blocklist = {$home, $office }

group "external" on wm0 {
    block final from $blocklist to any port ssh
}

group default {
   pass all
}
>Fix:



Home | Main Index | Thread Index | Old Index