[Bug 207598] pf adds icmp unreach on gre/ipsec somehow

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207598

--- Comment #39 from commit-hook at freebsd.org ---
A commit references this bug:

Author: kp
Date: Wed Aug 17 09:24:46 UTC 2016
New revision: 304283
URL: https://svnweb.freebsd.org/changeset/base/304283

Log:
  MFC r302497:

  pf: Map hook returns onto the correct error values

  pf returns PF_PASS, PF_DROP, ... in the netpfil hooks, but the hook callers
  expect to get E<foo> error codes.
  Map the returns values. A pass is 0 (everything is OK), anything else means
  pf ate the packet, so return EACCES, which tells the stack not to emit an
ICMP
  error message.

  PR:     207598

Changes:
_U  stable/10/
  stable/10/sys/netpfil/pf/pf_ioctl.c

-- 
You are receiving this mail because:
You are the assignee for the bug.