Daniel Hartmeier 8092705059 IPv6 packets can contain headers (like options) before the TCP/UDP/ICMP6 ... header. pf finds the first TCP/UDP/ICMP6 header to filter by traversing the header chain. In the case where headers are skipped, the protocol checksum verification used the wrong length (included the skipped headers), leading to incorrectly mismatching checksums. Such IPv6 packets with headers were silently dropped. Discovered by: Bernhard Schmidt MFC after: 1 week		2004-12-05 12:15:43 +00:00
..
if_pflog.c	Move pf* init from SI_SUB_PSEUDO to SI_SUB_PROTO_IFATTACHDOMAIN where it is	2004-09-14 03:12:01 +00:00
if_pflog.h
if_pfsync.c	Move pf* init from SI_SUB_PSEUDO to SI_SUB_PROTO_IFATTACHDOMAIN where it is	2004-09-14 03:12:01 +00:00
if_pfsync.h
pf_if.c	Improved interface handling. This should fix the use of renamed interfaces	2004-11-03 17:21:12 +00:00
pf_ioctl.c	Add an additional struct inpcb * argument to pfil(9) in order to enable	2004-09-29 04:54:33 +00:00
pf_norm.c	Get rid of the RANDOM_IP_ID option and make it a sysctl. NetBSD	2004-08-14 15:32:40 +00:00
pf_osfp.c
pf_subr.c
pf_table.c	Initialize s variable early to shut up GCC warnings.	2004-07-28 06:14:44 +00:00
pf.c	IPv6 packets can contain headers (like options) before the TCP/UDP/ICMP6	2004-12-05 12:15:43 +00:00
pfvar.h	Add an additional struct inpcb * argument to pfil(9) in order to enable	2004-09-29 04:54:33 +00:00