pf: Fix copy/paste error in IPv6 address rewriting

We checked the destination address, but replaced the source address. This was
fixed in OpenBSD as part of their NAT rework, which we don't want to import
right now.

CID:		1009561
MFC after:	3 weeks
This commit is contained in:
Kristof Provost 2018-10-24 00:19:44 +00:00
parent e9b1dc32c9
commit 13d640d376

View File

@ -3429,7 +3429,7 @@ pf_test_rule(struct pf_rule **rm, struct pf_state **sm, int direction,
if (PF_ANEQ(daddr,
&nk->addr[pd->didx], AF_INET6))
PF_ACPY(saddr, &nk->addr[pd->didx], af);
PF_ACPY(daddr, &nk->addr[pd->didx], af);
break;
#endif /* INET */
}