CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2017/05/31 03:19:10
Modified files:
sys/net : pf.c
share/man/man5 : pf.conf.5
Log message:
Block IPv6 packets in pf(4) that have hop-by-hop options header or
destination options header. Such packets can be passed by adding
"allow-opts" to the rule. So IPv6 options are handled like their
counterpart in IPv4 now.
tested by benno@; OK henning@
