https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=268717
--- Comment #8 from d...@rabson.org --- I was also wary of adding complexity to pf_test although there is some precedent here - pf_route does recurse back to pf_test. The other idea I had was to add a second packet filter call from ip_input and ip6_input at the point where the packet is accepted as local but before its handed off to tcp (or udp) but that seemed a riskier option. Perhaps the PF_OUT test for packets with local destination could be performed in pf_route which would leave pf_test alone? -- You are receiving this mail because: You are the assignee for the bug.
