diff options
| author |   mpi <mpi@openbsd.org> | 2015-02-05 01:10:57 +0000 |
|---|---|---|
| committer | mpi <mpi@openbsd.org> | 2015-02-05 01:10:57 +0000 |
| commit | cd5ec7edf014224dba1df0e2c8d6e5157a33e636 (patch) | |
| tree | 0373febef6c8c3a9d0027d66a9e62b31c2098d46 /lib/libssl/src | |
| parent | Simplify by deleting the "lastline" member of struct mdoc_node. (diff) | |
| download | wireguard-openbsd-cd5ec7edf014224dba1df0e2c8d6e5157a33e636.tar.xz wireguard-openbsd-cd5ec7edf014224dba1df0e2c8d6e5157a33e636.zip | |
Make sure pf(4) does not see embedded scopes.
Packets destinated to link-local addresses are looped back with embedded
scopes because we cannot restore them using the receiving interface (lo0).
Embedded scopes are needed by the routing table to match RTF_LOCAL routes,
but pf(4) never saw them and existing rules are likely to break without
teaching the rule engine about them, found by dlg@ the hard way.
So save and restore embedded scopes around pf_test() for packets going
through loopback.
ok dlg@, mikeb@
Diffstat (limited to 'lib/libssl/src')
0 files changed, 0 insertions, 0 deletions