CVSROOT: /cvs
Module name: src
Changes by: henn...@cvs.openbsd.org 2010/09/23 20:22:37
Modified files:
sys/net : pf.c
Log message:
use pd->rdomain for the PF_MISMATCHAW checks in pf_test_fragment instead of
hardcoding 0.
roughly almost a bit equivalent to what pf_test_rule does. changing the
rdomain for not reassembled fragments is not going to work ever, so the
full dance pf_test_rule does doesn't make sense here.
speaking of sense, I don't see anything remotely resembling sense in
pf filtering on fragments without reassembling them first.
with/ok claudio
