Overlapping ICMP ID not handled by PF state

Started by d00b2020, February 21, 2025, 11:59:56 PM

Previous topic - Next topic
Yes it seems to be confusing the ICMP ID with the type now. The state tracking uses a virtual_id / virtual_type idea for sport / dport faking. Formerly it would use the ICMP ID on both sport / dport and now it fails to properly guess the direction. virtual "sport" 8 and "dport" 8 is always the right direction ;)