diff options
author | Henning Brauer <henning@cvs.openbsd.org> | 2012-07-07 18:39:22 +0000 |
---|---|---|
committer | Henning Brauer <henning@cvs.openbsd.org> | 2012-07-07 18:39:22 +0000 |
commit | e270a01adaae8383487dc64f0f1509d5eca10c39 (patch) | |
tree | e57210febc36ee57ea3cbfe0e2881e221ead28dc /sbin | |
parent | 0dfc99960bdca3e31faaf1bbb1ab09a6efe9cfab (diff) |
remove incorrect check in pfctl preventing set-tos for ipvshit.
the kernel has code to deal with set-tos and that crap. don't ask for
details. stuart ok
Diffstat (limited to 'sbin')
-rw-r--r-- | sbin/pfctl/parse.y | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/sbin/pfctl/parse.y b/sbin/pfctl/parse.y index 04aef0fdfc5..50b7fe2dc3d 100644 --- a/sbin/pfctl/parse.y +++ b/sbin/pfctl/parse.y @@ -1,4 +1,4 @@ -/* $OpenBSD: parse.y,v 1.614 2012/07/07 16:24:32 henning Exp $ */ +/* $OpenBSD: parse.y,v 1.615 2012/07/07 18:39:21 henning Exp $ */ /* * Copyright (c) 2001 Markus Friedl. All rights reserved. @@ -4172,9 +4172,9 @@ rule_consistent(struct pf_rule *r, int anchor_call) problems++; } if (r->af == AF_INET6 && (r->scrub_flags & - (PFSTATE_NODF|PFSTATE_RANDOMID|PFSTATE_SETTOS))) { + (PFSTATE_NODF|PFSTATE_RANDOMID))) { yyerror("address family inet6 does not support scrub options " - "no-df, random-id, set-tos"); + "no-df, random-id"); problems++; } |