summaryrefslogtreecommitdiff
path: root/sys/net/pf.c
diff options
context:
space:
mode:
authorHenning Brauer <henning@cvs.openbsd.org>2010-12-24 20:12:57 +0000
committerHenning Brauer <henning@cvs.openbsd.org>2010-12-24 20:12:57 +0000
commitddc2da753b49f1b63a20b0d8d1f6cd8a18595635 (patch)
tree5762602cd0a2f86d2c0e5ffb46b30927f32ad802 /sys/net/pf.c
parentf532008dddc3a24cd04e33a164e8fef31d5e6536 (diff)
in pf_src_connlimit, the indices to sk->addr were swapped.
tracked down and diff sent by Robert B Mills <rbmills at sdf.lonestar.org> thanks, very good work! ok claudio
Diffstat (limited to 'sys/net/pf.c')
-rw-r--r--sys/net/pf.c6
1 files changed, 3 insertions, 3 deletions
diff --git a/sys/net/pf.c b/sys/net/pf.c
index 5bd379b7f5e..c6240bd001f 100644
--- a/sys/net/pf.c
+++ b/sys/net/pf.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: pf.c,v 1.714 2010/12/07 11:39:40 jsg Exp $ */
+/* $OpenBSD: pf.c,v 1.715 2010/12/24 20:12:56 henning Exp $ */
/*
* Copyright (c) 2001 Daniel Hartmeier
@@ -485,9 +485,9 @@ pf_src_connlimit(struct pf_state **state)
if (sk->af ==
(*state)->key[PF_SK_WIRE]->af &&
(((*state)->direction == PF_OUT &&
- PF_AEQ(&sn->addr, &sk->addr[0], sk->af)) ||
+ PF_AEQ(&sn->addr, &sk->addr[1], sk->af)) ||
((*state)->direction == PF_IN &&
- PF_AEQ(&sn->addr, &sk->addr[1], sk->af))) &&
+ PF_AEQ(&sn->addr, &sk->addr[0], sk->af))) &&
((*state)->rule.ptr->flush &
PF_FLUSH_GLOBAL ||
(*state)->rule.ptr == st->rule.ptr)) {