libalias-bug in FreeBSD

[Rhicinus]

Hello,

I tried unsuccessfully to find information about this elsewhere, so I ask here, if someone knows, if the FreeBSD-bug of the libalias will be addressed in pfsense software with a patch.

https://www.freebsd.org/security/advisories/FreeBSD-SA-20:12.libalias.asc

From the description I understand this is a security issue also affecting pfsense.

best regards

[dotdash]

The only place ipfw is used in pfSense is the captive portal, and that's not doing any NAT, so I don't see any way this PR would apply.

[Rhicinus]

Hi,

so you say the FW rules are not done in ipfw? And also not the outbound NAT for the networks used as client networks in the captive portal? This is a bit confusing for me.

best regards

[dotdash]

The firewalling and NAT are done in pf, not ipfw. If you enable the captive portal, it uses ipfw for the CP blocking functions. Perhaps you were thinking of ipfwSense.