CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2018/05/10 02:52:01
Modified files: sys/net : pf.c Log message: pf route-to should not send packets from 127.0.0.1 or ::1 address to the network. This is necessary for locally generated icmp packets that would be dropped otherwise. Refine this check to modify only the source address of packets that go to the external network. This allows route-to tricks on loopback interface. OK sashan@