pfsync: Fix state sync during initial bulk update
States learned via pfsync from a peer with the same ruleset checksum were not getting assigned to rules like they should because pfsync_in_upd() wasn't passing the PFSYNC_SI_CKSUM flag along to pfsync_state_import. PR: 229092 Submitted by: Kajetan Staszkiewicz <vegeta tuxpowered.net> Obtained from: OpenBSD MFC after: 1 week Sponsored by: InnoGames GmbH
This commit is contained in:
parent
2f800e5593
commit
de210decd1
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=335816
@ -869,7 +869,7 @@ pfsync_in_upd(struct pfsync_pkt *pkt, struct mbuf *m, int offset, int count)
|
|||||||
st = pf_find_state_byid(sp->id, sp->creatorid);
|
st = pf_find_state_byid(sp->id, sp->creatorid);
|
||||||
if (st == NULL) {
|
if (st == NULL) {
|
||||||
/* insert the update */
|
/* insert the update */
|
||||||
if (pfsync_state_import(sp, 0))
|
if (pfsync_state_import(sp, pkt->flags))
|
||||||
V_pfsyncstats.pfsyncs_badstate++;
|
V_pfsyncstats.pfsyncs_badstate++;
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user