From 02516b81478e4c7fe93815a73996a7fd212c8bb7 Mon Sep 17 00:00:00 2001
From: Joel Sing <jsing@cvs.openbsd.org>
Date: Mon, 22 Jun 2009 13:55:40 +0000
Subject: Fix scrub max-mss for IPv6 traffic.

spotted by naddy@

ok henning@
---
 sys/net/pf.c | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

(limited to 'sys')

diff --git a/sys/net/pf.c b/sys/net/pf.c
index a7ced6b29a0..b20428aa1d5 100644
--- a/sys/net/pf.c
+++ b/sys/net/pf.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: pf.c,v 1.651 2009/06/08 03:56:14 henning Exp $ */
+/*	$OpenBSD: pf.c,v 1.652 2009/06/22 13:55:39 jsing Exp $ */
 
 /*
  * Copyright (c) 2001 Daniel Hartmeier
@@ -5915,6 +5915,13 @@ pf_test6(int dir, struct ifnet *ifp, struct mbuf **m0,
 		} else if (s == NULL)
 			action = pf_test_rule(&r, &s, dir, kif,
 			    m, off, h, &pd, &a, &ruleset, &ip6intrq);
+
+		if (s) {
+			if (s->max_mss)
+				pf_normalize_mss(m, off, &pd, s->max_mss);
+		} else if (r->max_mss)
+			pf_normalize_mss(m, off, &pd, r->max_mss);
+
 		break;
 	}
 
-- 
cgit v1.2.3