CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2010/09/08 02:34:42
Modified files:
sys/netinet : ip_divert.c ip_input.c ip_output.c raw_ip.c
tcp_output.c udp_usrreq.c
Log message:
Return EACCES when pf_test() blocks a packet in ip_output(). This allows
ip_forward() to know the difference between blocked packets and those that
can't be forwarded (EHOSTUNREACH). Only in the latter case an ICMP should
be sent. In the other callers of ip_output() change the error back to
EHOSTUNREACH since userland may not expect EACCES on a sendto().
OK henning@, markus@
