summaryrefslogtreecommitdiff
path: root/sbin/pfctl
diff options
context:
space:
mode:
authorHenning Brauer <henning@cvs.openbsd.org>2003-05-14 05:14:07 +0000
committerHenning Brauer <henning@cvs.openbsd.org>2003-05-14 05:14:07 +0000
commit35c3d7099125fc0a67561be1ba7c7ddbd8d8fce8 (patch)
tree0abe73d8d53440d62db985f73fc86a525015d970 /sbin/pfctl
parent2576e9be7d7f85d92247564998addaf026bf1898 (diff)
with tag/tagged given, only whine about missing keep state on pass rules
Diffstat (limited to 'sbin/pfctl')
-rw-r--r--sbin/pfctl/parse.y5
1 files changed, 3 insertions, 2 deletions
diff --git a/sbin/pfctl/parse.y b/sbin/pfctl/parse.y
index 199072470ca..0f5e42ba9e6 100644
--- a/sbin/pfctl/parse.y
+++ b/sbin/pfctl/parse.y
@@ -1,4 +1,4 @@
-/* $OpenBSD: parse.y,v 1.378 2003/05/14 05:02:12 frantzen Exp $ */
+/* $OpenBSD: parse.y,v 1.379 2003/05/14 05:14:06 henning Exp $ */
/*
* Copyright (c) 2001 Markus Friedl. All rights reserved.
@@ -2960,7 +2960,8 @@ filter_consistent(struct pf_rule *r)
yyerror("keep state on block rules doesn't make sense");
problems++;
}
- if ((r->tagname[0] || r->match_tagname[0]) && !r->keep_state) {
+ if ((r->tagname[0] || r->match_tagname[0]) && !r->keep_state &&
+ r->action == PF_PASS) {
yyerror("tags cannot be used without keep state");
problems++;
}