CVSROOT: /cvs Module name: src Changes by: [email protected] 2023/10/12 13:15:21
Modified files:
sys/net : if_pflog.c
Log message:
pflog(4) logs packet dropped by default rule with block.
If a packet is malformed, it is dropped by pf(4). The rule referenced
in pflog(4) is the default rule. As the default rule is a pass
rule, tcpdump printed "pass" although the packet was actually
dropped. To avoid confusion, change the action to drop. Then
tcpdump prints "block".
OK sashan@ kn@
