CVSROOT: /cvs Module name: src Changes by: mi...@cvs.openbsd.org 2011/12/19 16:32:36
Modified files:
sys/net : pf.c
Log message:
improve the icmp direction check to deal correctly with af-to states
(there only one state and it's direction is always PF_IN) and don't
exclude icmp echo replies from the test.
ok mcbride, claudio on previous version, ok henning, "looks good" deraadt
