Kristof Provost aa7cac58c6 pf: Map hook returns onto the correct error values ...

pf returns PF_PASS, PF_DROP, ... in the netpfil hooks, but the hook callers
expect to get E<foo> error codes.
Map the returns values. A pass is 0 (everything is OK), anything else means
pf ate the packet, so return EACCES, which tells the stack not to emit an ICMP
error message.

PR:	207598

2016-07-09 12:17:01 +00:00

..

if_pflog.c

Make sure pflog is attached after pf is initializaed so we can

2016-06-23 22:31:10 +00:00

if_pfsync.c

Proerply virtualize pfsync for bringup after pf is initialized and

2016-06-23 22:31:44 +00:00

in4_cksum.c

…

pf_altq.h

…

pf_if.c

Update pf(4) and pflog(4) to survive basic VNET testing, which includes

2016-06-23 21:34:38 +00:00

pf_ioctl.c

pf: Map hook returns onto the correct error values

2016-07-09 12:17:01 +00:00

pf_lb.c

…

pf_mtag.h

…

pf_norm.c

pf: Fix fragment timeout

2016-05-20 15:41:05 +00:00

pf_osfp.c

…

pf_ruleset.c

…

pf_table.c

MFP r287070,r287073: split radix implementation and route table structure.

2016-01-25 06:33:15 +00:00

pf.c

Update pf(4) and pflog(4) to survive basic VNET testing, which includes

2016-06-23 21:34:38 +00:00

pf.h

…