Drop PKT_ALIAS_IGNORED packets if ``nat deny_incoming yes'' is in effect.

Approved by: rwatson, ru
This commit is contained in:
Brian Somers 2000-10-30 18:02:01 +00:00
parent 642cd09fb3
commit cf881f54ca

View File

@ -421,7 +421,11 @@ nat_LayerPull(struct bundle *bundle, struct link *l, struct mbuf *bp,
break;
case PKT_ALIAS_IGNORED:
if (log_IsKept(LogTCPIP)) {
if (PacketAliasSetMode(0, 0) & PKT_ALIAS_DENY_INCOMING) {
log_Printf(LogTCPIP, "NAT engine denied data:\n");
m_freem(bp);
bp = NULL;
} else if (log_IsKept(LogTCPIP)) {
log_Printf(LogTCPIP, "NAT engine ignored data:\n");
PacketCheck(bundle, MBUF_CTOP(bp), bp->m_len, NULL, NULL, NULL);
}