CVSROOT: /cvs Module name: src Changes by: henn...@cvs.openbsd.org 2009/02/18 13:06:23
Modified files:
sys/net : pf_lb.c
Log message:
bring back the NAT NOP fix, but this time right.
when we want to pretend pf_get_translation didn't do anything we must
get rid of _both_ state keys and reset all 4 sk pointers to NULL and
not leave one key behind and have all 4 pointers point to it - that must
fail. tested dhill sthen, david agrees, deraadt ok
