CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2021/06/01 18:44:19
Modified files:
sys/net : if_veb.c if_tpmr.c
Log message:
use ipv4_check and ipv6_check to well, check ip headers before running pf.
unlike bridge(4), these checks are only run when the packet is
entering the veb/tpmr topology. the assumption is that only valid
IP packets end up inside the topology so we don't have to check
them when they're leaving.
ok bluhm@ sashan@
