Drop PKT_ALIAS_IGNORED packets if ``nat deny_incoming yes'' is in effect.
Approved by: rwatson, ru
This commit is contained in:
parent
642cd09fb3
commit
cf881f54ca
@ -421,7 +421,11 @@ nat_LayerPull(struct bundle *bundle, struct link *l, struct mbuf *bp,
|
||||
break;
|
||||
|
||||
case PKT_ALIAS_IGNORED:
|
||||
if (log_IsKept(LogTCPIP)) {
|
||||
if (PacketAliasSetMode(0, 0) & PKT_ALIAS_DENY_INCOMING) {
|
||||
log_Printf(LogTCPIP, "NAT engine denied data:\n");
|
||||
m_freem(bp);
|
||||
bp = NULL;
|
||||
} else if (log_IsKept(LogTCPIP)) {
|
||||
log_Printf(LogTCPIP, "NAT engine ignored data:\n");
|
||||
PacketCheck(bundle, MBUF_CTOP(bp), bp->m_len, NULL, NULL, NULL);
|
||||
}
|
||||
|
Loading…
x
Reference in New Issue
Block a user