freebsd-dev/sys/netpfil/pf
Kristof Provost 076b3a50fd pf: don't drop packets when redirection information comes from a state
For some traffic there might be no matching rule in the current ruleset,
for example when a state was imported via pfsync from a sytem with a
different ruleset checksum. In this case pf_route uses s->rt_addr for
routing target instead of r->rpool.cur but r->rpool is checked anyway,
resulting in dropped packets.

PR:		259183
Submitted by:	Kajetan Staszkiewicz <vegeta tuxpowered.net>
Sponsored by:	InnoGames GmbH
2021-10-16 23:02:26 +02:00
..
if_pflog.c pf: Split pfi_kif into a user and kernel space structure 2021-01-05 23:35:37 +01:00
if_pfsync.c pf: rename pf_state to pf_kstate 2021-07-08 10:31:43 +02:00
in4_cksum.c SPDX: license IDs for some ISC-related files. 2017-12-08 15:57:29 +00:00
pf_altq.h pf: qid and pqid can be uint16_t 2021-09-10 17:07:57 +02:00
pf_if.c pf: switch kif counters to pf_counter_u64 2021-07-25 10:22:17 +02:00
pf_ioctl.c pf: do not copy anchor_wildcard / anchor_relative from userspace 2021-10-08 14:46:59 +02:00
pf_lb.c pf: selecting pf_map_addr is not an error 2021-10-16 09:32:15 +02:00
pf_mtag.h pf: qid and pqid can be uint16_t 2021-09-10 17:07:57 +02:00
pf_norm.c pf: implement set-tos for IPv6 2021-08-19 10:07:56 +02:00
pf_nv.c pf: Introduce pf_nvbool() 2021-10-13 12:01:09 +02:00
pf_nv.h pf: Introduce pf_nvbool() 2021-10-13 12:01:09 +02:00
pf_osfp.c net: clean up empty lines in .c and .h files 2020-09-01 21:19:14 +00:00
pf_ruleset.c pf: match keyword support 2021-07-17 12:01:08 +02:00
pf_syncookies.c pf: hook up adaptive mode configuration 2021-09-29 15:11:54 +02:00
pf_table.c pf: Remove unneeded NULL check 2021-07-08 10:32:33 +02:00
pf.c pf: don't drop packets when redirection information comes from a state 2021-10-16 23:02:26 +02:00
pf.h pf: import pf_set_protostate() from OpenBSD 2021-09-01 12:02:19 +02:00