[Bug 255852] pf: set skip on: serious security hole

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=255852

Mark Linimon <***@FreeBSD.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |***@FreeBSD.org
Assignee|***@FreeBSD.org |***@FreeBSD.org

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=255852

Kristof Provost <***@freebsd.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
See Also| |https://bugs.freebsd.org/bu
| |gzilla/show_bug.cgi?id=2509
| |94
CC| |***@freebsd.org

--- Comment #1 from Kristof Provost <***@freebsd.org> ---
That's the 'set skip on <ifgroup>' issue. I was under the impression that it
was fixed in 13.0.

By the way, re-apply the ruleset will fix the skip configuration (and applying
it again will break it again) on affected systems.

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=255852

Kristof Provost <***@freebsd.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|New |Open
Assignee|***@FreeBSD.org |***@freebsd.org

--- Comment #2 from Kristof Provost <***@freebsd.org> ---
Sigh. I *thought* it was fixed everywhere, but apparently there's yet another
manifestation of it. I am so very sick of this bug.

Confirmed to affect main as well.