From 76a5096e4511677b49e230174c5e94c929858236 Mon Sep 17 00:00:00 2001 From: Alexander Bluhm Date: Mon, 28 Nov 2016 23:15:32 +0000 Subject: Path MTU discovery and traceroute did not always work with pf af-to. If an incoming packet is directly put into the output path, sending the icmp error packet is never done. As this is basically forwarding, calling ip_forward() for such packets does everything that is needed. OK mikeb@ --- sys/netinet/ip_input.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to 'sys/netinet/ip_input.c') diff --git a/sys/netinet/ip_input.c b/sys/netinet/ip_input.c index d96a77786cc..ee73d6ad3fa 100644 --- a/sys/netinet/ip_input.c +++ b/sys/netinet/ip_input.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ip_input.c,v 1.287 2016/11/28 11:12:45 mpi Exp $ */ +/* $OpenBSD: ip_input.c,v 1.288 2016/11/28 23:15:31 bluhm Exp $ */ /* $NetBSD: ip_input.c,v 1.30 1996/03/16 23:53:58 christos Exp $ */ /* @@ -129,7 +129,6 @@ static struct mbuf_queue ipsend_mq; void ip_ours(struct mbuf *); int ip_dooptions(struct mbuf *, struct ifnet *); int in_ouraddr(struct mbuf *, struct ifnet *, struct rtentry **); -void ip_forward(struct mbuf *, struct ifnet *, struct rtentry *, int); #ifdef IPSEC int ip_input_ipsec_fwd_check(struct mbuf *, int); int ip_input_ipsec_ours_check(struct mbuf *, int); -- cgit v1.2.3