CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2015/07/28 06:22:07
Modified files: sys/netinet : raw_ip.c sys/netinet6 : icmp6.c raw_ip6.c Log message: Implement pf divert-reply for raw sockets. Note that an empty divert->addr means that the rule has a divert-reply option. With divert-to the divert->addr is always set. The divert-reply rules should compare the original packet with the socket addresses. So skip the step that compares the inp->inp_laddr with the empty divert->addr. OK mikeb@