CVSROOT:        /cvs
Module name:    src
Changes by:     haesba...@cvs.openbsd.org       2013/11/15 03:18:27

Modified files:
        sys/net        : pf.c 

Log message:
Forget socket linking on pf_pkt_addr_changed(), this fixes among other
things, setups with ipsec+ifbound.

The sympthon was that local IPSec packets (tunnel->tunnel) would not
match state after the latest pf_find_state() changes. The first packet
would go through, but the subsequent ones would fail the match and
collide later with the existing state.

ok henning@ markus@

Reply via email to