CVSROOT: /cvs Module name: src Changes by: [EMAIL PROTECTED] 2008/10/02 09:12:45
Modified files: sys/net : pf.c Log message: When redirect is used with sticky-address and a matching pass rule uses reply-to, the sticky-address in the source tracking pool is overwritten with the reply-to address, resulting in new connections being incorrectly redirected to the reply-to host (instead of the sticky-address host). Prevent this by passing a NULL source node reference to pf_map_addr() when looking up the reply-to host, thus preventing the NAT source node from being overwritten. ok mcbride@ henning@