CVSROOT: /cvs Module name: src Changes by: haesba...@cvs.openbsd.org 2013/11/15 03:18:27
Modified files: sys/net : pf.c Log message: Forget socket linking on pf_pkt_addr_changed(), this fixes among other things, setups with ipsec+ifbound. The sympthon was that local IPSec packets (tunnel->tunnel) would not match state after the latest pf_find_state() changes. The first packet would go through, but the subsequent ones would fail the match and collide later with the existing state. ok henning@ markus@