CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2018/05/10 02:52:01
Modified files:
sys/net : pf.c
Log message:
pf route-to should not send packets from 127.0.0.1 or ::1 address
to the network. This is necessary for locally generated icmp packets
that would be dropped otherwise. Refine this check to modify only
the source address of packets that go to the external network. This
allows route-to tricks on loopback interface.
OK sashan@
