CVSROOT:        /cvs
Module name:    src
Changes by:     mi...@cvs.openbsd.org   2014/06/25 09:11:20

Modified files:
        sbin/pfctl     : parse.y 

Log message:
Make stricter decisions when handling translation specifications.

In particular, disallow specifications containing addresses of
different address families when rule doesn't specify one, for
example "pass out nat-to { ::1 1.1.1.1 }" will now produce an
error instead of silently picking one of the addresses.

sthen and deraadt agree

Reply via email to