diff options
| author | Claudio Jeker <claudio@cvs.openbsd.org> | 2010-09-08 08:34:43 +0000 |
|---|---|---|
| committer | Claudio Jeker <claudio@cvs.openbsd.org> | 2010-09-08 08:34:43 +0000 |
| commit | 276c0f482291e1afa9f8f322e04c20fe05a1a40e (patch) | |
| tree | b9322561495b26b42a75281bccaafae22b3ee97a /sys/net/if_pfsync.c | |
| parent | 4c55da9abcff6f1fb774f6cafd4fd75e6eba73f0 (diff) | |
Return EACCES when pf_test() blocks a packet in ip_output(). This allows
ip_forward() to know the difference between blocked packets and those that
can't be forwarded (EHOSTUNREACH). Only in the latter case an ICMP should
be sent. In the other callers of ip_output() change the error back to
EHOSTUNREACH since userland may not expect EACCES on a sendto().
OK henning@, markus@
Diffstat (limited to 'sys/net/if_pfsync.c')
0 files changed, 0 insertions, 0 deletions