Kristof Provost 3d1bbe5fa0 pf: Fix forwarding detection ...

If the direction is not PF_OUT we can never be forwarding. Some input packets
have rcvif != ifp (looped back packets), which lead us to ip6_forward() inbound
packets, causing panics.

Equally, we need to ensure that packets were really received and not locally
generated before trying to ip6_forward() them.

Differential Revision:	https://reviews.freebsd.org/D2286
Approved by:		gnn(mentor)

2015-04-14 19:07:37 +00:00

..

if_pflog.c

Mechanically convert to if_inc_counter().

2014-09-19 09:19:29 +00:00

if_pfsync.c

o Use new function ip_fillid() in all places throughout the kernel,

2015-04-01 22:26:39 +00:00

in4_cksum.c

…

pf_altq.h

Move new pf includes to the pf directory. The pfvar.h remain

2013-10-27 16:25:57 +00:00

pf_if.c

Back out r276841, r276756, r276747, r276746. The change in r276747 is very

2015-01-22 01:23:16 +00:00

pf_ioctl.c

Always lock the hash row of a source node when updating its 'states' counter.

2015-03-17 12:19:28 +00:00

pf_lb.c

Do not lookup source node twice when pf_map_addr() is used.

2014-08-15 14:16:08 +00:00

pf_mtag.h

In the forwarding case refragment the reassembled packets with the same

2015-02-16 07:01:02 +00:00

pf_norm.c

I can find no reason to allow packets with both SYN and FIN bits

2015-04-14 14:43:42 +00:00

pf_osfp.c

The r48589 promised to remove implicit inclusion of if_var.h soon. Prepare

2013-10-26 17:58:36 +00:00

pf_ruleset.c

Provide includes that are needed in these files, and before were read

2013-10-26 18:18:50 +00:00

pf_table.c

Back out r276841, r276756, r276747, r276746. The change in r276747 is very

2015-01-22 01:23:16 +00:00

pf.c

pf: Fix forwarding detection

2015-04-14 19:07:37 +00:00

pf.h

In the forwarding case refragment the reassembled packets with the same

2015-02-16 07:01:02 +00:00