CVSROOT:        /cvs
Module name:    src
Changes by:     [email protected]   2021/01/16 06:09:46

Modified files:
        sys/net        : pf.c 

Log message:
The sysctl variable net.inet.ip.forwarding is checked before
ip_input() passes the packet to ip_forward().  But with an af-to
rule, pf(4) calls ip_forward() directly.  Check the forwarding
sysctl also in pf to get consistent behavior.  This requires to set
both ip and ip6 forwarding to get packet flow in both directions
over af-to rules.
OK kn@

Reply via email to