CVSROOT:        /cvs
Module name:    src
Changes by:     [email protected]  2015/12/03 14:11:54

Modified files:
        sys/net        : if_var.h pf.c 
        sys/netinet    : ip_icmp.c ip_input.c ip_var.h 
        sys/netinet6   : icmp6.c ip6_input.c ip6_var.h 

Log message:
ip_send()/ip6_send() allow PF to send response packet in ipsoftnet task.
this avoids current recursion to pf_test() function. the change also
switches icmp_error()/icmp6_error() to use ip_send()/ip6_send() so
they are safe for PF.

The idea comes from Markus Friedl. bluhm, mikeb and mpi helped me
a lot to get it into shape.

OK bluhm@, mpi@

Reply via email to