diff options
| author |   dhartmei <dhartmei@openbsd.org> | 2005-05-22 16:22:41 +0000 |
|---|---|---|
| committer | dhartmei <dhartmei@openbsd.org> | 2005-05-22 16:22:41 +0000 |
| commit | 94b5501c72a2089807408c62fb49dc28a6860bdb (patch) | |
| tree | dcaee2c19ff5dcf9b85e4ae61bf4a7349c157382 | |
| parent | set fragmentation threshold in iwi_config(). (diff) | |
| download | wireguard-openbsd-94b5501c72a2089807408c62fb49dc28a6860bdb.tar.xz wireguard-openbsd-94b5501c72a2089807408c62fb49dc28a6860bdb.zip | |
honour the 'no' in 'no scrub' rules for IP normalizations. found by
mzozd at ad2u dot gr. ok henning@, mcbride@
| -rw-r--r-- | sys/net/pf_norm.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/sys/net/pf_norm.c b/sys/net/pf_norm.c index 0c592f1f6f1..c3033539dda 100644 --- a/sys/net/pf_norm.c +++ b/sys/net/pf_norm.c @@ -1,4 +1,4 @@ -/* $OpenBSD: pf_norm.c,v 1.98 2005/05/21 21:03:57 henning Exp $ */ +/* $OpenBSD: pf_norm.c,v 1.99 2005/05/22 16:22:41 dhartmei Exp $ */ /* * Copyright 2001 Niels Provos <provos@citi.umich.edu> @@ -849,7 +849,7 @@ pf_normalize_ip(struct mbuf **m0, int dir, struct pfi_kif *kif, u_short *reason, break; } - if (r == NULL) + if (r == NULL || r->action == PF_NOSCRUB) return (PF_PASS); else r->packets++; @@ -1067,7 +1067,7 @@ pf_normalize_ip6(struct mbuf **m0, int dir, struct pfi_kif *kif, break; } - if (r == NULL) + if (r == NULL || r->action == PF_NOSCRUB) return (PF_PASS); else r->packets++; |