The branch main has been updated by kp:
URL:
https://cgit.FreeBSD.org/src/commit/?id=7986051313507636e7bd971e9db03dce8d723e32
commit 7986051313507636e7bd971e9db03dce8d723e32
Author: Kristof Provost <k...@freebsd.org>
AuthorDate: 2025-07-18 09:54:25 +0000
Commit: Kristof Provost <k...@freebsd.org>
CommitDate: 2025-07-18 19:12:18 +0000
pf tests: make mbuf:inet6_in_mbuf_len more robust
The mbuf:inet6_in_mbuf_len test sometimes fails because it encountered
unexpected extra packets. These turn out to be MLD packets, so block these
packets on the host with pf so they don't disturb what we're actually trying
to test.
Reviewed by: igoro
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D51408
---
tests/sys/netpfil/pf/mbuf.sh | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/tests/sys/netpfil/pf/mbuf.sh b/tests/sys/netpfil/pf/mbuf.sh
index d845f793a969..e3f138bb73b9 100644
--- a/tests/sys/netpfil/pf/mbuf.sh
+++ b/tests/sys/netpfil/pf/mbuf.sh
@@ -105,6 +105,12 @@ inet6_in_mbuf_len_body()
epair=$(vnet_mkepair)
ifconfig ${epair}a inet6 2001:db8::1/64 up no_dad
+ # Ensure we don't unintentionally send MLD packets to alcatraz
+ pfctl -e
+ echo "block
+ pass out inet6 proto icmp6 icmp6-type { neighbrsol, neighbradv,
echoreq, echorep }
+ " | pfctl -g -f -
+
# Set up a simple jail with one interface
vnet_mkjail alcatraz ${epair}b
jexec alcatraz ifconfig ${epair}b inet6 2001:db8::2/64 up no_dad
