[Bug 229477] [PATCH] fail-policy changes cause delays on synproxy packets

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229477

--- Comment #10 from commit-hook at freebsd.org ---
A commit references this bug:

Author: kp
Date: Sat Jul 14 10:14:59 UTC 2018
New revision: 336275
URL: https://svnweb.freebsd.org/changeset/base/336275

Log:
  pf: Fix synproxy

  Synproxy was accidentally broken by r335569. The 'return (action)' must be
  executed for every non-PF_PASS result, but the error packet (TCP RST or ICMP
  error) should only be sent if the packet was dropped (i.e. PF_DROP) and the
  return flag is set.

  PR:           229477
  Submitted by: Andre Albsmeier <mail AT fbsd.e4m.org>
  MFC after:    1 week

Changes:
  head/sys/netpfil/pf/pf.c

-- 
You are receiving this mail because:
You are the assignee for the bug.