[Bug 207598] pf adds icmp unreach on gre/ipsec somehow

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Wed Aug 17 09:24:35 UTC 2016


--- Comment #38 from commit-hook at freebsd.org ---
A commit references this bug:

Author: kp
Date: Wed Aug 17 09:23:41 UTC 2016
New revision: 304282
URL: https://svnweb.freebsd.org/changeset/base/304282

  MFC r302497:

  pf: Map hook returns onto the correct error values

  pf returns PF_PASS, PF_DROP, ... in the netpfil hooks, but the hook callers
  expect to get E<foo> error codes.
  Map the returns values. A pass is 0 (everything is OK), anything else means
  pf ate the packet, so return EACCES, which tells the stack not to emit an
  error message.

  PR:     207598

_U  stable/11/

You are receiving this mail because:
You are the assignee for the bug.

More information about the freebsd-pf mailing list