CVSROOT: /cvs Module name: src Changes by: mi...@cvs.openbsd.org 2012/08/30 05:43:37
Modified files:
sys/net : pf.c
Log message:
Sloppy state tracking renders ICMP direction check useless
and harmful as we might see only half of the connection in
the asymmetric setups but ignore the state match. The bug
was reported and fix was verified by Insan Praja <insan ()
ims-solusi ! com>. Thanks! OK mcbride, henning
