When redirect is used with sticky-address and a matching pass rule uses

reply-to, the sticky-address in the source tracking pool is overwritten
with the reply-to address, resulting in new connections being incorrectly
redirected to the reply-to host (instead of the sticky-address host).

Prevent this by passing a NULL source node reference to pf_map_addr() when
looking up the reply-to host, thus preventing the NAT source node from
being overwritten.

ok mcbride@ henning@

0 files changed, 0 insertions, 0 deletions