[Bug 229477] [PATCH] fail-policy changes cause delays on synproxy packets

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229477

--- Comment #11 from commit-hook at freebsd.org ---
A commit references this bug:

Author: kp
Date: Sat Jul 21 07:00:22 UTC 2018
New revision: 336575
URL: https://svnweb.freebsd.org/changeset/base/336575

Log:
  MFC r336275:

  pf: Fix synproxy

  Synproxy was accidentally broken by r335569. The 'return (action)' must be
  executed for every non-PF_PASS result, but the error packet (TCP RST or ICMP
  error) should only be sent if the packet was dropped (i.e. PF_DROP) and the
  return flag is set.

  PR:           229477
  Submitted by: Andre Albsmeier <mail AT fbsd.e4m.org>

Changes:
_U  stable/11/
  stable/11/sys/netpfil/pf/pf.c

-- 
You are receiving this mail because:
You are the assignee for the bug.