pfsync: Fix state sync during initial bulk update
States learned via pfsync from a peer with the same ruleset checksum were not getting assigned to rules like they should because pfsync_in_upd() wasn't passing the PFSYNC_SI_CKSUM flag along to pfsync_state_import. PR: 229092 Submitted by: Kajetan Staszkiewicz <vegeta tuxpowered.net> Obtained from: OpenBSD MFC after: 1 week Sponsored by: InnoGames GmbH
This commit is contained in:
parent
72fc61d161
commit
8734281615
@ -869,7 +869,7 @@ pfsync_in_upd(struct pfsync_pkt *pkt, struct mbuf *m, int offset, int count)
|
||||
st = pf_find_state_byid(sp->id, sp->creatorid);
|
||||
if (st == NULL) {
|
||||
/* insert the update */
|
||||
if (pfsync_state_import(sp, 0))
|
||||
if (pfsync_state_import(sp, pkt->flags))
|
||||
V_pfsyncstats.pfsyncs_badstate++;
|
||||
continue;
|
||||
}
|
||||
|
Loading…
x
Reference in New Issue
Block a user