cvs commit: src/sys/contrib/pf/net if_pfsync.c

[Gleb Smirnoff]

glebius     2005-11-03 12:25:29 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_5)
    sys/contrib/pf/net   if_pfsync.c 
  Log:
  MFOpenBSD 1.37, 1.38, 1.41. This is already present in RELENG_6 and
  HEAD due to OPENBSD_3_7 pf import
  
  - Increment the states reference counter in the rule attached to the state
    being inserted, so that the counter does not wrap back when the state
    is removed. This fixes pfsync setups with adaptive timeouts.
  
  - Clean up reference counting wrt state creation and destruction. Fixes
    problems with adaptive timeouts, max-states limits, and rules not being
    freed from memory.
  
  - Set creation timestamps correctly on states learnt by pfsync that are
    more than a second old.
  
  PR:             83187
  PR:             83186
  Submitted by:   Martin Matuska
  
  Revision  Changes    Path
  1.11.2.4  +7 -2      src/sys/contrib/pf/net/if_pfsync.c