Maxfield Allison maxfield-allison

pfsync stale destination: source reproduction and live observations

pfsync_upd_tcp() rejects a stale destination peer, but both callers can copy it afterward. This package reproduces that overwrite using blocks extracted from pinned upstream source. The candidate patches have been exercised in userspace on Linux and FreeBSD; neither has been built or installed in a kernel.

Reproduce

Download all files in this gist into one directory. Requirements: Python 3, a C compiler named cc, patch, and curl for the source download.

For the installed OPNsense 26.1 revision:

	#!/bin/sh

	# Define storage variable
	STORAGE=nas

	# Install necessary tools
	echo "Checking tools"
	apt update -y && apt install nano wget curl libguestfs-tools -y

	# Remove old image

	<html>
	<body>
	<H1>SERVER - <%
	Set objWSHNetwork = Server.CreateObject("WScript.Network")
	Response.Write objWSHNetwork.ComputerName
	%></H1>
	<br>
	<p>
	<b>HTTPS:</b>
	<%Response.Write(Request.ServerVariables("HTTPS"))%>