CVSROOT: /cvs
Module name: src
Changes by: mi...@cvs.openbsd.org 2011/12/12 14:30:28
Modified files:
sys/net : pf.c pf_ioctl.c pfvar.h
sbin/pfctl : parse.y pfctl_parser.c
Log message:
fixup af-to regression with match rules
pfctl should not infer the af-to behavior from the af/naf difference.
instead, we should be clear that this is an af-to rule. essentially
this change converts FOM_AFTO marker into a rule flag PFRULE_AFTO so
that we don't rely on ambiguous checks (like r->af != r->naf) when
setting things up.
positive review and comments from claudio, ok henning, sperreault
