diff options
| author |   henning <henning@openbsd.org> | 2012-07-07 18:39:21 +0000 |
|---|---|---|
| committer | henning <henning@openbsd.org> | 2012-07-07 18:39:21 +0000 |
| commit | db2fe2a2ddea6d0e79521d925de973ea1882925f (patch) | |
| tree | 9edb7b96a44680568e89354dccf878971f1b9717 | |
| parent | Support the .cc request; code by kristaps@, tests by me. (diff) | |
| download | wireguard-openbsd-db2fe2a2ddea6d0e79521d925de973ea1882925f.tar.xz wireguard-openbsd-db2fe2a2ddea6d0e79521d925de973ea1882925f.zip | |
remove incorrect check in pfctl preventing set-tos for ipvshit.
the kernel has code to deal with set-tos and that crap. don't ask for
details. stuart ok
| -rw-r--r-- | sbin/pfctl/parse.y | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/sbin/pfctl/parse.y b/sbin/pfctl/parse.y index 04aef0fdfc5..50b7fe2dc3d 100644 --- a/sbin/pfctl/parse.y +++ b/sbin/pfctl/parse.y @@ -1,4 +1,4 @@ -/* $OpenBSD: parse.y,v 1.614 2012/07/07 16:24:32 henning Exp $ */ +/* $OpenBSD: parse.y,v 1.615 2012/07/07 18:39:21 henning Exp $ */ /* * Copyright (c) 2001 Markus Friedl. All rights reserved. @@ -4172,9 +4172,9 @@ rule_consistent(struct pf_rule *r, int anchor_call) problems++; } if (r->af == AF_INET6 && (r->scrub_flags & - (PFSTATE_NODF|PFSTATE_RANDOMID|PFSTATE_SETTOS))) { + (PFSTATE_NODF|PFSTATE_RANDOMID))) { yyerror("address family inet6 does not support scrub options " - "no-df, random-id, set-tos"); + "no-df, random-id"); problems++; } |