• Franco Fichtner's avatar
    firewall: npt alignment · e4f56188
    Franco Fichtner authored
    NPT is a kind of abandoned feature that had a custom kernel patch.
    I tried to trace the origin through OpenBSD, but their pf(4) since
    switched away from separate binat rules in the last known form like
    it is still in FreeBSD.
    
    Furthermore, the original GUI commit looks odd in that it tries to
    push the same traffic downwards that would match in the former line,
    which acutally points upwards.  It's either that or completely zapping
    the line.  For now, repair the rules reload by trying to retain the
    spirit of what it tries to achieve and wait for further feedback.
    
    This late bug report also suggests that virtually nobody uses NPT
    today since we've had no upstream reports since at least 15.7 was
    out.
    
    PR: https://forum.opnsense.org/index.php?topic=3076.0
    (cherry picked from commit 39eed8a1)
    e4f56188
Name
Last commit
Last update
..
devd Loading commit data...
inc Loading commit data...
pkg Loading commit data...
rc.d Loading commit data...
ssl Loading commit data...
bogons.sample Loading commit data...
bogonsv6.sample Loading commit data...
config.xml.sample Loading commit data...
ddb.conf Loading commit data...
dh-parameters.1024 Loading commit data...
dh-parameters.2048 Loading commit data...
dh-parameters.4096 Loading commit data...
netflow.conf.example Loading commit data...
rc Loading commit data...
rc.backup_dhcpleases Loading commit data...
rc.backup_netflow Loading commit data...
rc.backup_rrd Loading commit data...
rc.bootup Loading commit data...
rc.carpbackup Loading commit data...
rc.carpmaster Loading commit data...
rc.crashdump Loading commit data...
rc.dyndns.update Loading commit data...
rc.expireaccounts Loading commit data...
rc.filter_configure_sync Loading commit data...
rc.filter_configure_xmlrpc Loading commit data...
rc.filter_synchronize Loading commit data...
rc.firmware Loading commit data...
rc.halt Loading commit data...
rc.halt.common Loading commit data...
rc.initial Loading commit data...
rc.initial.banner Loading commit data...
rc.initial.defaults Loading commit data...
rc.initial.firmware Loading commit data...
rc.initial.halt Loading commit data...
rc.initial.password Loading commit data...
rc.initial.ping Loading commit data...
rc.initial.reboot Loading commit data...
rc.initial.setlanip Loading commit data...
rc.initial.setports Loading commit data...
rc.installer Loading commit data...
rc.interfaces_wan_configure Loading commit data...
rc.ipfw Loading commit data...
rc.ipfw.postload Loading commit data...
rc.kill_states Loading commit data...
rc.linkup Loading commit data...
rc.newipsecdns Loading commit data...
rc.newroutedns Loading commit data...
rc.newwanip Loading commit data...
rc.newwanipv6 Loading commit data...
rc.openvpn Loading commit data...
rc.opnsense Loading commit data...
rc.php_ini_setup Loading commit data...
rc.php_test_run Loading commit data...
rc.reboot Loading commit data...
rc.recover Loading commit data...
rc.reload_all Loading commit data...
rc.reload_interfaces Loading commit data...
rc.resolv_conf_generate Loading commit data...
rc.restart_webgui Loading commit data...
rc.restore_config_backup Loading commit data...
rc.sshd Loading commit data...
rc.syshook Loading commit data...
rc.update_alias_url_data Loading commit data...
rc.update_bogons Loading commit data...
rc.update_urltables Loading commit data...